chore(deps): update dependency turbo to v2.7.3

[renovate]

Note: This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Age	Confidence
turbo (source)	2.3.4 → 2.7.3

---

Release Notes

vercel/turborepo (turbo)

v2.7.3: Turborepo v2.7.3

Compare Source

What's Changed

Examples

• examples: Remove skipLibCheck from nestjs.json in nestJS example by @​leos in #​11323

Changelog

• fix(bun): Add GitHub/git packages by @​Palid in #​11268
• chore: Extract turborepo-boundaries crate from turborepo-lib by @​anthonyshew in #​11312
• chore: Extract turborepo-engine crate from turborepo-lib by @​anthonyshew in #​11315
• chore: Extract turborepo-gitignore crate from turborepo-lib by @​anthonyshew in #​11317
• chore: Extract turborepo-json-rewrite crate from turborepo-lib by @​anthonyshew in #​11318
• chore: Extract turborepo-hash and turborepo-types crates from turborepo-lib by @​anthonyshew in #​11319
• chore: Extract turborepo-shim crate from turborepo-lib by @​anthonyshew in #​11320
• chore: Extract types to turborepo-types and create turborepo-daemon crate by @​anthonyshew in #​11321
• chore: Extract turborepo-daemon crate from turborepo-lib by @​anthonyshew in #​11322
• chore: Extract turborepo-scope crate from turborepo-lib by @​anthonyshew in #​11324
• chore: Extract turborepo-diagnostics crate from turborepo-lib by @​anthonyshew in #​11332
• feat: Extract turborepo-task-hash crate from turborepo-lib by @​anthonyshew in #​11334
• chore: Move TaskDefinition from turborepo-lib to turborepo-types by @​anthonyshew in #​11335
• chore: Move DryRunMode, UIMode, and LogOrder to turborepo-types by @​anthonyshew in #​11337
• chore: Fix loop in build script in package.json by @​anthonyshew in #​11336
• chore: Move ContinueMode and LogPrefix to turborepo-types by @​anthonyshew in #​11338
• chore: Extract run/summary to turborepo-run-summary crate by @​anthonyshew in #​11342
• chore: Extract turbo_json module to turborepo-turbo-json crate by @​anthonyshew in #​11344
• chore: Extract config and engine builder modules from turborepo-lib by @​anthonyshew in #​11346
• chore: Remove duplicate task_inheritance.rs from turborepo-lib by @​anthonyshew in #​11347
• chore: Extract run/cache.rs to turborepo-run-cache crate by @​anthonyshew in #​11348
• chore: remove extra file by @​anthonyshew in #​11351
• chore: Move resolved opts types to turborepo-types by @​anthonyshew in #​11349
• chore: Extract some small items from turborepo-lib by @​anthonyshew in #​11350
• chore: Move engine builder tests from turborepo-lib to turborepo-engine by @​anthonyshew in #​11353
• chore: Move global_hash.rs from turborepo-lib to turborepo-task-hash by @​anthonyshew in #​11355
• chore: Move more shared types to turborepo-types by @​anthonyshew in #​11356
• chore: Add turborepo-task-executor crate by @​anthonyshew in #​11357
• chore: Add generic CommandProvider trait to turborepo-task-executor by @​anthonyshew in #​11358
• chore: Implement MfeConfigProvider and TaskAccessProvider traits by @​anthonyshew in #​11359
• chore: Add From<&RunOpts> for ExecutorConfig conversion by @​anthonyshew in #​11360
• chore: Move TurboJsonReader to turborepo-turbo-json crate by @​anthonyshew in #​11361
• chore: Move TaskExecutor to turborepo-task-executor crate by @​anthonyshew in #​11364
• chore: Move TurboJsonLoader to turborepo-turbo-json crate by @​anthonyshew in #​11365
• chore: Consolidate TurboJson tests into turborepo-turbo-json crate by @​anthonyshew in #​11371
• chore: Extract task executor components to turborepo-task-executor by @​anthonyshew in #​11378
• chore: Move MicroFrontendProxyProvider to turborepo-task-executor by @​anthonyshew in #​11379
• chore: Clean up turborepo-lib wrapper modules and dead code by @​anthonyshew in #​11380
• fix: Show TUI when using --output-logs=errors-only|none by @​anthonyshew in #​11382

New Contributors

• @​Palid made their first contribution in #​11268
• @​leos made their first contribution in #​11323

Full Changelog: vercel/turborepo@v2.7.2...v2.7.3

v2.7.2: Turborepo v2.7.2

Compare Source

What's Changed

Docs

• perf(create-turbo): Download files faster by @​anthonyshew in #​11297

Examples

• examples(dev-deps): bump turbo from 2.6.3 to 2.7.1 in /examples/with-shell-commands in the with-shell-commands group by @​dependabot[bot] in #​11291
• examples(dev-deps): bump the with-svelte group in /examples/with-svelte with 3 updates by @​dependabot[bot] in #​11292
• examples(deps): bump the basic group in /examples/basic with 4 updates by @​dependabot[bot] in #​11293

Changelog

• fix: Use newline for separator in misuse text by @​anthonyshew in #​10834
• fix(create-turbo): Loader UI states by @​anthonyshew in #​11300
• fix: Exclude framework-inferred env vars with wildcards by @​anthonyshew in #​11303
• fix: Don't flash TUI on a >>> FULL TURBO by @​anthonyshew in #​11306
• fix: Transit nodes in Devtools by @​anthonyshew in #​11307

Full Changelog: vercel/turborepo@v2.7.1...v2.7.2

v2.7.1: Turborepo v2.7.1

Compare Source

What's Changed

Docs

• docs: Release post for 2.7 by @​anthonyshew in #​11272

Examples

• fix: Typo in example with-solid README.md description by @​jack-dev-crypto in #​11287

Changelog

• fix: Correctly validate workspace root as package by @​anthonyshew in #​11284
• fix: Overly aggressive path checking in microfrontends loading by @​anthonyshew in #​11286
• chore(boundaries): Allow packages to import themselves by @​NicholasLYang in #​10202
• feat(query): Provide query for external dependencies by @​chris-olszewski in #​9929
• fix: Correct version mismatch causing noUpdateNotifier to fail by @​DevaanshKathuria in #​11133
• chore: Format version printing similar to rest of prelude by @​anthonyshew in #​11289

New Contributors

• @​jack-dev-crypto made their first contribution in #​11287

Full Changelog: vercel/turborepo@v2.7.0...v2.7.1

v2.7.0: Turborepo v2.7.0

Compare Source

What's Changed

Docs

• docs(security): Update Next.js by @​anthonyshew in #​11208
• docs: Remove flags code by @​anthonyshew in #​11209
• docs: Cleanup Sentry from gitignore by @​anthonyshew in #​11210
• docs: Comment out Tinybird by @​anthonyshew in #​11211
• docs(fix): Sitemap by @​anthonyshew in #​11207
• docs: Revert "Comment out Tinybird" by @​anthonyshew in #​11223
• docs: Move search to built-in by @​anthonyshew in #​11224
• docs: fix typo in design-system.css comment by @​YASHRDX0001 in #​11231
• chore: Upgrade pnpm to 9 by @​anthonyshew in #​11226
• chore: Update pnpm to version 10 by @​anthonyshew in #​11237
• fix: React Server Components CVE vulnerabilities by @​vercel[bot] in #​11245
• docs: Add turboExtendsKeyword future flag and $TURBO_EXTENDS$ microsyntax by @​anthonyshew in #​11246
• docs: Fix Bun filtered install commands by @​anthonyshew in #​11260
• docs: Add turbo.json composition docs by @​anthonyshew in #​11247
• feat: Turborepo Devtools by @​anthonyshew in #​11263
• fix: Improve layouts and task graph sourcing for devtools" by @​anthonyshew in #​11269
• docs: Devtools by @​anthonyshew in #​11270
• chore: Remove future flags for nonRootExtends and turboExtendsKeyword in preparation for stable release by @​anthonyshew in #​11280

create-turbo

• fix(cli): Preserve exit codes in notifyUpdate functions by @​pyrytakala in #​11153

turbo-ignore

• fix: Quoting in turbo-ignore commands by @​anthonyshew in #​11239

eslint

• fix: Upgrade Next.js to 15.5.7 (CVE-2025-55182) by @​ctate in #​11232

@​turbo/repository

• chore: Update to Rust 1.92.0 by @​ognevny in #​11250

Examples

• examples(dev-deps): bump turbo from 2.6.1 to 2.6.3 in /examples/with-shell-commands by @​dependabot[bot] in #​11217
• examples(dev-deps): bump the basic group in /examples/basic with 2 updates by @​dependabot[bot] in #​11218
• examples(dev-deps): bump the with-svelte group in /examples/with-svelte with 3 updates by @​dependabot[bot] in #​11219
• examples: Use slim image (debian) for prepare and builder stage, use latest no… by @​mrr11k in #​11228
• examples(dev-deps): bump the with-svelte group in /examples/with-svelte with 2 updates by @​dependabot[bot] in #​11254
• examples(dev-deps): bump typescript-eslint from 8.48.1 to 8.49.0 in /examples/basic in the basic group by @​dependabot[bot] in #​11253
• examples(deps): bump react from 19.2.0 to 19.2.3 in /examples/non-monorepo by @​dependabot[bot] in #​11255

Changelog

• fix(turbo-utils): Add test for conflicting configs and remove stale TODO by @​deepakpathik in #​11201
• feat: Yarn 4 catalogs by @​anthonyshew in #​11115
• fix: Add Windows-specific env var to default passthroughs by @​anthonyshew in #​11233
• fix: Add fine grained interruptible task restarts in watch mode by @​johnpyp in #​11135
• perf: Find tasks impacted by packages faster by @​anthonyshew in #​11235
• ci: Fix release pipeline by @​anthonyshew in #​11240
• ci: Fix release pipeline by @​anthonyshew in #​11241
• fix: Compose tasks when composing turbo.json by @​anthonyshew in #​11248
• chore: Run pre-commit fmt on all files by @​anthonyshew in #​11261
• feat: Task-level extends field by @​anthonyshew in #​11259
• fix: Allow root microfrontends.json config for @​vercel/microfrontends by @​anthonyshew in #​11264
• chore: Fix lint-staged and orphan GitHub Action by @​anthonyshew in #​11275
• chore: Remove coverage tooling by @​anthonyshew in #​11276
• chore: Clear false positive unused warnings by @​anthonyshew in #​11277
• ci: Fix flaky test (hopefully) by @​anthonyshew in #​11278

New Contributors

• @​deepakpathik made their first contribution in #​11201
• @​YASHRDX0001 made their first contribution in #​11231
• @​ctate made their first contribution in #​11232
• @​johnpyp made their first contribution in #​11135
• @​vercel[bot] made their first contribution in #​11245

Full Changelog: vercel/turborepo@v2.6.3...v2.7.0

v2.6.3

Compare Source

v2.6.2

Compare Source

v2.6.1

Compare Source

v2.6.0: Turborepo v2.6.0

Compare Source

What's Changed

Docs

• docs: clarification on Transit Nodes docs by @​maschwenk in #​9181
• docs: add GitHub Actions reusable workflow documentation for remote caching by @​anthonyshew in #​10923
• docs: generate blog release OG images by @​anthonyshew in #​10936
• docs: fix correct package name from eslint-config-turbo to eslint-plugin-turbo by @​tetzng in #​10954
• docs: align tailwindcss 4 guide to the with-tailwind example by @​esauri in #​10963
• docs: fix typos and formatting issues in Playwright guide by @​yamcodes in #​10980
• docs: adjust compute hours saved component initial value by @​anthonyshew in #​10958
• docs: clarify passthrough args comparison by @​emilbjorklund in #​10990
• docs: fix profile images on home page by @​anthonyshew in #​10993
• feat: microfrontends by @​anthonyshew in #​10982
• docs: Clarify passtrhough args cache miss by @​eug-vs in #​11026
• fix: path validation in microfrontends.json by @​anthonyshew in #​11006
• feat(microfrontends): schema.json for microfrontends.json by @​anthonyshew in #​11008

create-turbo

• feat: update create-turbo Bun prompt text by @​anthonyshew in #​10918

eslint

• fix(eslint-config-turbo): use module.exports for ESLint v8 compatibility by @​anthonyshew in #​10902
• perf: ~8.6x faster ESLint rule by @​anthonyshew in #​10943

Examples

• Update package.json by @​Satheeshsk369 in #​10892
• docs: fix JSDoc type for ESLint config in basic example by @​victor-code19 in #​10727
• refactor(examples): enhance with-nestjs (#​8131) by @​Neosoulink in #​10964
• examples: Upgrade core-team-maintained examples to Next.js 16 by @​anthonyshew in #​11014

Changelog

• chore: remove missing turbow.js references by @​pauloZion1 in #​10893
• fix(turborepo-lockfiles): handle missing optional dependencies in Bun lockfiles by @​anthonyshew in #​10909
• fix: update ui suggested value in error message for turbo.json by @​hugomassing in #​10896
• chore: remove unused origin field from auth structs by @​anthonyshew in #​10910
• feat: new OAuth flow for Turborepo CLI with Vercel by @​anthonyshew in #​10911
• fix(lockfiles): include bundled dependencies in Bun lockfile subgraphs by @​anthonyshew in #​10915
• test: increase coverage for lockfiles by @​anthonyshew in #​10633
• fix: update remote cache OAuth refresh flow by @​anthonyshew in #​10916
• feat(tui): task list search with / by @​anthonyshew in #​10908
• fix: --graph=foo.dot should not require graphviz installed by @​blast-hardcheese in #​10942
• chore: update devcontainer configuration by @​anthonyshew in #​10955
• fix: injectWorkspacePackages for turbo prune with pnpm by @​anthonyshew in #​10945
• fix: adjust binary call for microfrontends proxy on Windows by @​mknichel in #​10962
• Add worktrees.json configuration to .cursor directory by @​Copilot in #​10986
• fix: windows symlinking bug by @​anthonyshew in #​10992
• fix: added Linux env vars to global passthroughs by @​aviramha in #​10984
• fix: recursive transitive closure analysis in npm lockfile parser by @​anthonyshew in #​10988
• ci(fix): dynamically set ports in proxy integration tests by @​anthonyshew in #​11009
• feat: Add support for custom microfrontends.json naming by @​kitfoster in #​11022

New Contributors

• @​Satheeshsk369 made their first contribution in #​10892
• @​robobun made their first contribution in #​10729
• @​hugomassing made their first contribution in #​10896
• @​victor-code19 made their first contribution in #​10727
• @​blast-hardcheese made their first contribution in #​10942
• @​tetzng made their first contribution in #​10954
• @​esauri made their first contribution in #​10963
• @​Copilot made their first contribution in #​10986
• @​emilbjorklund made their first contribution in #​10990
• @​aviramha made their first contribution in #​10984
• @​eug-vs made their first contribution in #​11026
• @​kitfoster made their first contribution in #​11022

Full Changelog: vercel/turborepo@v2.5.8...v2.6.0

v2.5.8: Turborepo v2.5.8

Compare Source

What's Changed

create-turbo

• fix: revert #​10847 by @​anthonyshew in #​10882

Changelog

• chore: add Cursor slash command by @​anthonyshew in #​10881

Full Changelog: vercel/turborepo@v2.5.7...v2.5.8

v2.5.7: Turborepo v2.5.7

Compare Source

What's Changed

Docs

• docs: add TURBO_CONCURRENCY to options overview page by @​anthonyshew in #​10772
• fix(docs): fix broken anchor links to --graph option by @​anthonyshew in #​10773
• docs: clarify TURBO_TEAM secret usage by @​vikhyathdevadiga in #​10795
• docs: add Buildkite example to CI Vendors documentation by @​AndrewDiMola in #​10721
• docs: rework llms.txt and add .md responses by @​anthonyshew in #​10811
• docs: add name field mention to migration page by @​anthonyshew in #​10823
• docs: update configuration reference to use correct turbo.json title by @​xcfio in #​10843
• docs: correct description of how ^ works by @​anthonyshew in #​10865

create-turbo

• feat(create-turbo): --no-git flag by @​anthonyshew in #​10720
• chore(create-turbo): fix lint by @​chris-olszewski in #​10807
• fix(security): update dependencies to resolve warning for node-plop by @​anthonyshew in #​10847

eslint

• docs: adjust typo on instructions for eslint-config-turbo legacy config by @​evsasse in #​10717

@​turbo/repository

• chore: reformat code with 2024 edition by @​ognevny in #​10775

Examples

• chore(deps-dev): bump the with-svelte group in /examples/with-svelte with 6 updates by @​dependabot[bot] in #​10752
• chore(deps-dev): bump turbo from 2.5.5 to 2.5.6 in /examples/with-shell-commands by @​dependabot[bot] in #​10781
• chore(deps-dev): bump @​sveltejs/kit from 2.27.3 to 2.31.1 in /examples/with-svelte in the with-svelte group by @​dependabot[bot] in #​10780
• chore(deps-dev): bump @​next/eslint-plugin-next from 15.4.2 to 15.4.6 in /examples/with-tailwind by @​dependabot[bot] in #​10779
• chore(deps-dev): bump @​next/eslint-plugin-next from 15.4.2 to 15.4.6 in /examples/basic by @​dependabot[bot] in #​10776
• chore(deps): bump next from 15.4.2 to 15.4.6 in /examples/non-monorepo by @​dependabot[bot] in #​10778
• chore(deps-dev): bump the with-svelte group in /examples/with-svelte with 3 updates by @​dependabot[bot] in #​10787
• chore(deps): bump the basic group in /examples/basic with 3 updates by @​dependabot[bot] in #​10788
• fix: add types node to fix minimatch issue by @​oliveirabalsa in #​10730
• chore(deps-dev): bump the basic group in /examples/basic with 2 updates by @​dependabot[bot] in #​10797
• chore(deps-dev): bump the with-svelte group in /examples/with-svelte with 2 updates by @​dependabot[bot] in #​10800

Changelog

• feat(turbo_json): add $TURBO_EXTENDS$ by @​chris-olszewski in #​10763
• chore(deps): bump the kitchen-sink group in /examples/kitchen-sink with 10 updates by @​dependabot[bot] in #​10758
• chore: fix lints by @​chris-olszewski in #​10786
• docs: add top level crate documentation by @​chris-olszewski in #​10801
• docs: add more doc comments for working with the lockfile trait by @​chris-olszewski in #​10802
• fix(logs): create log files for non-cached tasks by @​chris-olszewski in #​10806
• ci: add packaging checks for some JS packages by @​anthonyshew in #​10810
• docs: fix typos by @​pauloZion1 in #​10821
• feat(turbo_json): allow for extending form non-root turbo.json by @​chris-olszewski in #​10812
• feat(tui): add shortcut for clearing task logs by @​mcky in #​10828
• chore: mention other package managers in bug report template by @​anthonyshew in #​10849
• feat: add Expo to common frameworks by @​Alvi24 in #​10861
• chore: remove label from workflows by @​anthonyshew in #​10864
• fix: add WINDIR to default passthroughs by @​anthonyshew in #​10868
• fix: output valid turbo.json for prune with Boundaries definition by @​anthonyshew in #​10866
• fix: sanitize logging prefix for GitLab groups by @​anthonyshew in #​10850

New Contributors

• @​oliveirabalsa made their first contribution in #​10730
• @​vikhyathdevadiga made their first contribution in #​10795
• @​AndrewDiMola made their first contribution in #​10721
• @​pauloZion1 made their first contribution in #​10821
• @​mcky made their first contribution in #​10828
• @​xcfio made their first contribution in #​10843
• @​evsasse made their first contribution in #​10717
• @​Alvi24 made their first contribution in #​10861

Full Changelog: vercel/turborepo@v2.5.6...v2.5.7

v2.5.6: Turborepo v2.5.6

Compare Source

What's Changed

Docs

• fix(examples): correct 'test:projects' script to use vitest directly by @​namidapoo in #​10683
• docs: update docs about env file handling by @​anthonyshew in #​10710
• docs(run): correct --graph formats; remove incorrect default mention by @​anthonyshew in #​10744
• docs(run): fix --log-prefix options to match CLI (task, not prefix) by @​anthonyshew in #​10743
• docs: update --graph reference by @​chris-olszewski in #​10759

@​turbo/repository

• chore: update to Rust 1.88.0 by @​ognevny in #​10608
• chore: update to Rust 1.89.0 by @​ognevny in #​10749

Examples

• fix(examples): add missing extension to with-react-native-web ui tsconfig by @​Franck-Fernandez-pro in #​10694
• feat: upgrade NestJS to v11 and migrate to ESLint flat config by @​iamnivekx in #​10746

Changelog

• docs: add architecture document for turbo run by @​chris-olszewski in #​10702
• feat: allow Watch Mode with --root-turbo-json by @​anthonyshew in #​10687
• chore(tower-uds): delete unused crate by @​anthonyshew in #​10676
• test(turbo-utils): improve test coverage by @​anthonyshew in #​10693
• test(turborepo-auth): unit tests for auth crate by @​anthonyshew in #​10692
• feat: improve parsing error by @​anthonyshew in #​10682
• chore: fix lints in tests by @​chris-olszewski in #​10707
• chore(turbo_json): lift $TURBO_DEFAULT$ handling to turbo.json resolution by @​chris-olszewski in #​10709
• chore(turbo_json): prefactor loading logic by @​chris-olszewski in #​10719
• fix(logs): no longer output group prefixes if no logs present by @​chris-olszewski in #​10760
• fix(turbo): graceful shutdown on sighup by @​chris-olszewski in #​10764

New Contributors

• @​namidapoo made their first contribution in #​10683
• @​Franck-Fernandez-pro made their first contribution in #​10694
• @​iamnivekx made their first contribution in #​10746

Full Changelog: vercel/turborepo@v2.5.5...v2.5.6

v2.5.5: Turborepo v2.5.5

Compare Source

What's Changed

Docs

• fix(docs): use pnpm add <pkg> instead of pnpm install <pkg> by @​jferrettiboke in #​10529
• fix(docs): missing commas in package.json files of jest docs by @​ashish0kumar in #​10560
• fix(docs): css import order bug in tailwindcss docs and example by @​ashish0kumar in #​10561
• docs: logo fix by @​anthonyshew in #​10562
• chore: bump to next@​15.4.0-canary.81 by @​mischnic in #​10530
• fix(docs): incorrect CSS filename in Tailwind CSS setup example by @​jihwan1211 in #​10573
• docs: clarity for GitHub Actions caching strategies by @​anthonyshew in #​10583
• fix(docs): inconsistent command with the illustration by @​wilsonwangdev in #​10596
• fix(docs): inconsistent turbo command with the illustration by @​wilsonwangdev in #​10602
• docs: update Vitest recommendations by @​anthonyshew in #​10621
• docs: clarify default inputs behavior by @​anthonyshew in #​10628
• docs: fixing --no-cache alert by @​0ri0nexe in #​10653
• feat(auth): optional callback port by @​anthonyshew in #​10666

Examples

• fix: with-svelte example builds by @​anthonyshew in #​10517
• chore(deps-dev): bump the basic group in /examples/basic with 3 updates by @​dependabot[bot] in #​10531
• chore(deps-dev): bump the with-svelte group in /examples/with-svelte with 3 updates by @​dependabot[bot] in #​10532
• chore(deps-dev): bump turbo from 2.5.3 to 2.5.4 in /examples/with-shell-commands by @​dependabot[bot] in #​10533
• chore(deps-dev): bump the with-tailwind group in /examples/with-tailwind with 3 updates by @​dependabot[bot] in #​10534
• chore(deps): bump the non-monorepo group in /examples/non-monorepo with 6 updates by @​dependabot[bot] in #​10535
• chore(deps-dev): bump the kitchen-sink group in /examples/kitchen-sink with 5 updates by @​dependabot[bot] in #​10536
• chore(deps-dev): bump eslint-plugin-react from 7.37.4 to 7.37.5 in /examples/basic by @​dependabot[bot] in #​10553
• chore(deps): bump the non-monorepo group in /examples/non-monorepo with 3 updates by @​dependabot[bot] in #​10554
• chore(deps-dev): bump @​types/node from 22.15.3 to 22.15.30 in /examples/with-tailwind by @​dependabot[bot] in #​10555
• chore(deps-dev): bump @​sveltejs/vite-plugin-svelte from 5.0.3 to 5.1.0 in /examples/with-svelte in the with-svelte group by @​dependabot[bot] in #​10556
• chore(deps-dev): bump @​vitejs/plugin-react from 4.5.0 to 4.5.1 in /examples/kitchen-sink by @​dependabot[bot] in #​10557
• fix(example/with-docker): jest can’t resolve @​repo/jest-presets/node by @​d0lwl0b in #​10551
• fix(non-monorepo): correct devDependency from 'turb' to 'turbo' by @​DiegoDev2 in #​10526
• chore(deps-dev): bump the basic group in /examples/basic with 3 updates by @​dependabot[bot] in #​10567
• chore(deps): bump the kitchen-sink group in /examples/kitchen-sink with 6 updates by [@&#820

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[bolt-new-by-stackblitz]

Run & review this pull request in StackBlitz Codeflow.

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	tsup@​8.3.6
	svgo@​3.3.2

View full report

[socket-security]

Warning

Review the following alerts detected in dependencies.

According to your organization's Security Policy, it is recommended to resolve "Warn" alerts. Learn more about Socket for GitHub.

Action	Severity	Alert  (click "▶" to expand/collapse)
Warn		Obfuscated code: npm svgo is 91.0% likely obfuscated Confidence: 0.91 Location: Package overview From: package.json → npm/[email protected] ℹ Read more on: This package | This alert | What is obfuscated code? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at [email protected]. Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/[email protected]. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

View full report