⬆️ Update dependency lint-staged to ^16.4.0#19
Open
renovate[bot] wants to merge 1 commit into
Open
Conversation
renovate
Bot
force-pushed
the
renovate/lint-staged-16.x
branch
from
September 28, 2025 09:25
6e191d7 to
2dba93a
Compare
renovate
Bot
changed the title
renovate
Bot
changed the title
renovate
Bot
force-pushed
the
renovate/lint-staged-16.x
branch
from
September 28, 2025 17:38
2dba93a to
e1dfa1b
Compare
renovate
Bot
changed the title
renovate
Bot
force-pushed
the
renovate/lint-staged-16.x
branch
2 times, most recently
from
October 14, 2025 11:01
5c0c72f to
b2b89f2
Compare
renovate
Bot
force-pushed
the
renovate/lint-staged-16.x
branch
from
October 20, 2025 22:01
b2b89f2 to
1d52a7b
Compare
renovate
Bot
changed the title
renovate
Bot
force-pushed
the
renovate/lint-staged-16.x
branch
from
October 22, 2025 18:47
1d52a7b to
6c863c2
Compare
renovate
Bot
changed the title
renovate
Bot
force-pushed
the
renovate/lint-staged-16.x
branch
from
November 10, 2025 18:36
6c863c2 to
a242e4a
Compare
renovate
Bot
changed the title
renovate
Bot
force-pushed
the
renovate/lint-staged-16.x
branch
from
November 19, 2025 20:51
a242e4a to
be00d7e
Compare
renovate
Bot
force-pushed
the
renovate/lint-staged-16.x
branch
from
February 2, 2026 21:04
be00d7e to
69baeb0
Compare
renovate
Bot
force-pushed
the
renovate/lint-staged-16.x
branch
from
February 28, 2026 12:39
69baeb0 to
ba14a7b
Compare
renovate
Bot
changed the title
renovate
Bot
force-pushed
the
renovate/lint-staged-16.x
branch
from
March 1, 2026 21:39
ba14a7b to
4c57c97
Compare
renovate
Bot
changed the title
renovate
Bot
force-pushed
the
renovate/lint-staged-16.x
branch
from
March 3, 2026 21:38
4c57c97 to
27353c8
Compare
renovate
Bot
changed the title
renovate
Bot
force-pushed
the
renovate/lint-staged-16.x
branch
from
March 10, 2026 06:08
27353c8 to
17899d8
Compare
renovate
Bot
changed the title
renovate
Bot
force-pushed
the
renovate/lint-staged-16.x
branch
from
March 15, 2026 00:45
17899d8 to
a88c452
Compare
renovate
Bot
changed the title
renovate
Bot
force-pushed
the
renovate/lint-staged-16.x
branch
from
March 26, 2026 17:53
a88c452 to
3fc49c8
Compare
renovate
Bot
force-pushed
the
renovate/lint-staged-16.x
branch
from
May 18, 2026 10:42
3fc49c8 to
372b40d
Compare
##### [v16.4.0](https://github.com/lint-staged/lint-staged/blob/HEAD/CHANGELOG.md#1640) ##### Minor Changes - [#1739](lint-staged/lint-staged#1739) [`687fc90`](lint-staged/lint-staged@687fc90) Thanks [@hyperz111](https://github.com/hyperz111)! - Replace `micromatch` with `picomatch` to reduce dependencies. ##### [v16.3.4](https://github.com/lint-staged/lint-staged/blob/HEAD/CHANGELOG.md#1634) ##### Patch Changes - [#1742](lint-staged/lint-staged#1742) [`9d6e827`](lint-staged/lint-staged@9d6e827) Thanks [@iiroj](https://github.com/iiroj)! - Update dependencies, including [`[email protected]`](https://github.com/tinylibs/tinyexec/releases/tag/1.0.4) to make sure local `node_modules/.bin` are preferred to global locations (released in [`[email protected]`](https://github.com/tinylibs/tinyexec/releases/tag/1.0.3)). ##### [v16.3.3](https://github.com/lint-staged/lint-staged/blob/HEAD/CHANGELOG.md#1633) ##### Patch Changes - [#1740](lint-staged/lint-staged#1740) [`0109e8d`](lint-staged/lint-staged@0109e8d) Thanks [@iiroj](https://github.com/iiroj)! - Make sure Git's warning about CRLF line-endings doesn't interfere with creating initial backup stash. ##### [v16.3.2](https://github.com/lint-staged/lint-staged/blob/HEAD/CHANGELOG.md#1632) ##### Patch Changes - [#1735](lint-staged/lint-staged#1735) [`2adaf6c`](lint-staged/lint-staged@2adaf6c) Thanks [@iiroj](https://github.com/iiroj)! - Hide the extra `cmd` window on Windows by spawning tasks without the `detached` option. ##### [v16.3.1](https://github.com/lint-staged/lint-staged/blob/HEAD/CHANGELOG.md#1631) ##### Patch Changes - [#1729](lint-staged/lint-staged#1729) [`cd5d762`](lint-staged/lint-staged@cd5d762) Thanks [@iiroj](https://github.com/iiroj)! - Remove `nano-spawn` as a dependency from `package.json` as it was replaced with `tinyexec` and is no longer used. ##### [v16.3.0](https://github.com/lint-staged/lint-staged/blob/HEAD/CHANGELOG.md#1630) ##### Minor Changes - [#1698](lint-staged/lint-staged#1698) [`feda37a`](lint-staged/lint-staged@feda37a) Thanks [@iiroj](https://github.com/iiroj)! - Run external processes with [`tinyexec`](https://github.com/tinylibs/tinyexec) instead of [`nano-spawn`](https://github.com/sindresorhus/nano-spawn). `nano-spawn` replaced [`execa`](https://github.com/sindresorhus/execa) in *lint-staged* version 16 to limit the amount of npm dependencies required, but caused some unknown issues related to spawning tasks. Let's hope `tinyexec` improves the situation. - [#1699](lint-staged/lint-staged#1699) [`1346d16`](lint-staged/lint-staged@1346d16) Thanks [@iiroj](https://github.com/iiroj)! - Remove `pidtree` as a dependency. When a task fails, its sub-processes are killed more efficiently via the process group on Unix systems, and the `taskkill` command on Windows. ##### Patch Changes - [#1726](lint-staged/lint-staged#1726) [`87467aa`](lint-staged/lint-staged@87467aa) Thanks [@iiroj](https://github.com/iiroj)! - Incorrect brace expansions like `*.{js}` (*nothing to expand*) are detected exhaustively, instead of just a single pass. ##### [v16.2.7](https://github.com/lint-staged/lint-staged/blob/HEAD/CHANGELOG.md#1627) ##### Patch Changes - [#1711](lint-staged/lint-staged#1711) [`ef74c8d`](lint-staged/lint-staged@ef74c8d) Thanks [@iiroj](https://github.com/iiroj)! - Do not display a "*failed to spawn*" error message when a task fails normally. This message is reserved for when the task didn't run because spawning it failed. ##### [v16.2.6](https://github.com/lint-staged/lint-staged/blob/HEAD/CHANGELOG.md#1626) ##### Patch Changes - [#1693](lint-staged/lint-staged#1693) [`33d4502`](lint-staged/lint-staged@33d4502) Thanks [@Adrian-Baran-GY](https://github.com/Adrian-Baran-GY)! - Fix problems with `--continue-on-error` option, where tasks might have still been killed (`SIGINT`) when one of them failed. ##### [v16.2.5](https://github.com/lint-staged/lint-staged/blob/HEAD/CHANGELOG.md#1625) ##### Patch Changes - [#1687](lint-staged/lint-staged#1687) [`9e02d9d`](lint-staged/lint-staged@9e02d9d) Thanks [@iiroj](https://github.com/iiroj)! - Fix unhandled promise rejection when spawning tasks (*instead of the tasks themselves failing*). Previously when a task failed to spawn, *lint-staged* also failed and the backup stash might not have been automatically restored. ##### [v16.2.4](https://github.com/lint-staged/lint-staged/blob/HEAD/CHANGELOG.md#1624) ##### Patch Changes - [#1682](lint-staged/lint-staged#1682) [`0176038`](lint-staged/lint-staged@0176038) Thanks [@iiroj](https://github.com/iiroj)! - Update dependencies, including [`[email protected]`](https://github.com/sindresorhus/nano-spawn/releases/tag/v2.0.0) with bug fixes. - [#1671](lint-staged/lint-staged#1671) [`581a54e`](lint-staged/lint-staged@581a54e) Thanks [@iiroj](https://github.com/iiroj)! - Speed up execution by only importing the `yaml` depedency if using YAML configuration files. ##### [v16.2.3](https://github.com/lint-staged/lint-staged/blob/HEAD/CHANGELOG.md#1623) ##### Patch Changes - [#1669](lint-staged/lint-staged#1669) [`27cd541`](lint-staged/lint-staged@27cd541) Thanks [@iiroj](https://github.com/iiroj)! - When using `--fail-on-changes`, automatically hidden (partially) unstaged changes are no longer counted to make *lint-staged* fail. ##### [v16.2.2](https://github.com/lint-staged/lint-staged/blob/HEAD/CHANGELOG.md#1622) ##### Patch Changes - [#1667](lint-staged/lint-staged#1667) [`699f95d`](lint-staged/lint-staged@699f95d) Thanks [@iiroj](https://github.com/iiroj)! - The backup stash will not be dropped when using `--fail-on-changes` and there are errors. When reverting to original state is disabled (via `--no-revert` or `--fail-on-changes`), hidden (partially) unstaged changes are still restored automatically so that it's easier to resolve the situation manually. Additionally, the example for using the backup stash manually now uses the correct backup hash, if available: ```shell % npx lint-staged --fail-on-changes ✔ Backed up original state in git stash (c18d55a3) ✔ Running tasks for staged files... ✖ Tasks modified files and --fail-on-changes was used! ↓ Cleaning up temporary files... ✖ lint-staged failed because `--fail-on-changes` was used. Any lost modifications can be restored from a git stash: > git stash list --format="%h %s" c18d55a3 On main: lint-staged automatic backup > git apply --index c18d55a3 ``` ##### [v16.2.1](https://github.com/lint-staged/lint-staged/blob/HEAD/CHANGELOG.md#1621) ##### Patch Changes - [#1664](lint-staged/lint-staged#1664) [`8277b3b`](lint-staged/lint-staged@8277b3b) Thanks [@iiroj](https://github.com/iiroj)! - The built-in TypeScript types have been updated to more closely match the implementation. Notably, the list of staged files supplied to task functions is `readonly string[]` and can't be mutated. Thanks [@outslept](https://github.com/outslept)! ```diff export default { --- "*": (files: string[]) => void console.log('staged files', files) +++ "*": (files: readonly string[]) => void console.log('staged files', files) } ``` - [#1654](lint-staged/lint-staged#1654) [`70b9af3`](lint-staged/lint-staged@70b9af3) Thanks [@iiroj](https://github.com/iiroj)! - This version has been published from GitHub Actions using [Trusted Publishing for npm packages](https://docs.npmjs.com/trusted-publishers). - [#1659](lint-staged/lint-staged#1659) [`4996817`](lint-staged/lint-staged@4996817) Thanks [@iiroj](https://github.com/iiroj)! - Fix searching configuration files when the working directory is a subdirectory of a git repository, and there are `package.json` files in the working directory. This situation might happen when running *lint-staged* for a single package in a monorepo. - [#1654](lint-staged/lint-staged#1654) [`7021f0a`](lint-staged/lint-staged@7021f0a) Thanks [@iiroj](https://github.com/iiroj)! - Return the caret semver range (`^`) to direct dependencies so that future patch and minor versions are allowed. This enables projects to better maintain and deduplicate their own transitive dependencies while not requiring direct updates to *lint-staged*. This was changed in [16.2.0](https://github.com/lint-staged/lint-staged/releases/tag/v16.2.0) after the vulnerability issues with `chalk` and `debug`, which were also removed in the same version. Given the recent vulnerabilities in the *npm* ecosystem, it's best to be very careful when updating dependencies. ##### [v16.2.0](https://github.com/lint-staged/lint-staged/blob/HEAD/CHANGELOG.md#1620) ##### Minor Changes - [#1615](lint-staged/lint-staged#1615) [`99eb742`](lint-staged/lint-staged@99eb742) Thanks [@iiroj](https://github.com/iiroj)! - Added a new option `--fail-on-changes` to make *lint-staged* exit with code 1 when tasks modify any files, making the `precommit` hook fail. This is similar to the `git diff --exit-code` option. Using this flag also implies the `--no-revert` flag which means any changes made by tasks will be left in the working tree after failing, so that they can be manually staged and the commit tried again. - [#1611](lint-staged/lint-staged#1611) [`cd05fd3`](lint-staged/lint-staged@cd05fd3) Thanks [@rlorenzo](https://github.com/rlorenzo)! - Added a new option `--continue-on-error` so that *lint-staged* will run all tasks to completion even if some of them fail. By default, *lint-staded* will exit early on the first failure. - [#1637](lint-staged/lint-staged#1637) [`82fcc07`](lint-staged/lint-staged@82fcc07) Thanks [@iiroj](https://github.com/iiroj)! - Internal *lint-staged* errors are now thrown and visible in the console output. Previously they were caught with the process exit code set to 1, but not logged. This happens when, for example, there's a syntax error in the *lint-staged* configuration file. - [#1647](lint-staged/lint-staged#1647) [`a5ecc06`](lint-staged/lint-staged@a5ecc06) Thanks [@iiroj](https://github.com/iiroj)! - Remove [debug](https://github.com/debug-js/debug) as a dependency due to recent malware issue; read more at [debug-js/debug#1005](debug-js/debug#1005). Because of this, the `DEBUG` environment variable is no longer supported — use the `--debug` to enable debugging - [#1636](lint-staged/lint-staged#1636) [`8db2717`](lint-staged/lint-staged@8db2717) Thanks [@iiroj](https://github.com/iiroj)! - Added a new option `--hide-unstaged` so that *lint-staged* will hide all unstaged changes to tracked files before running tasks. The changes will be applied back after running the tasks. Note that the combination of flags `--hide-unstaged --no-hide-partially-staged` isn't meaningful and behaves the same as just `--hide-unstaged`. Thanks to [@ItsNickBarry](https://github.com/ItsNickBarry) for the idea and initial implementation in [#1552](lint-staged/lint-staged#1552). - [#1648](lint-staged/lint-staged#1648) [`7900b3b`](lint-staged/lint-staged@7900b3b) Thanks [@iiroj](https://github.com/iiroj)! - Remove [lilconfig](https://github.com/antonk52/lilconfig) to reduce reliance on third-party dependencies. It was used to find possible config files outside of those tracked in Git, including from the parent directories. This behavior has been moved directly into *lint-staged* and should work about the same. ##### Patch Changes - [#1633](lint-staged/lint-staged#1633) [`7f9e485`](lint-staged/lint-staged@7f9e485) Thanks [@dependabot](https://github.com/apps/dependabot)! - Bumps [listr2](https://github.com/listr2/listr2) from 9.0.3 to 9.0.4. - [#1626](lint-staged/lint-staged#1626) [`99d5a9b`](lint-staged/lint-staged@99d5a9b) Thanks [@iiroj](https://github.com/iiroj)! - Due to recent phishing attacks, for example [[email protected]](chalk/chalk#656) was released with malware. To avoid *lint-staged*'s users being at risk the **direct dependencies are pinned to exact versions**, instead of allowing future patch versions with the [caret (`^`) range](https://docs.npmjs.com/cli/v6/using-npm/semver#caret-ranges-123-025-004). - [#1588](lint-staged/lint-staged#1588) [`035bbf2`](lint-staged/lint-staged@035bbf2) Thanks [@outslept](https://github.com/outslept)! - Increase performance by listing staged files and searching for configuration concurrently. - [#1645](lint-staged/lint-staged#1645) [`deba3ad`](lint-staged/lint-staged@deba3ad) Thanks [@iiroj](https://github.com/iiroj)! - Remove [chalk](https://github.com/chalk/chalk) as a dependency due to recent malware issue; read more at [chalk/chalk#656](chalk/chalk#656). If you are having trouble with ANSI color codes when using *lint-staged*, you can try setting either `FORCE_COLOR=true` or `NO_COLOR=true` env variables.
renovate
Bot
force-pushed
the
renovate/lint-staged-16.x
branch
from
July 21, 2026 03:11
372b40d to
d97236f
Compare
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
^16.1.6→^16.4.0Configuration
📅 Schedule: (UTC)
* 21-23 * * 7)* 0-16 * * 1)🚦 Automerge: Enabled.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR was generated by Mend Renovate. View the repository job log.