Bump npm-check-updates from 20.0.0 to 21.0.2 in the npm-dependencies group

[dependabot]

Bumps the npm-dependencies group with 1 update: npm-check-updates.

Updates npm-check-updates from 20.0.0 to 21.0.2

Release notes

Sourced from npm-check-updates's releases.

v21.0.2

What's Changed

• fix: skip intersects() for non-semver specs like catalog: in peer dep checks by @​terminalchai in raineorshine/npm-check-updates#1675

Full Changelog: raineorshine/npm-check-updates@v21.0.1...v21.0.2

v21.0.1

What's Changed

• fix: seeing catalog when inside workspaces by @​Zamiell in raineorshine/npm-check-updates#1656
• Bump @​types/bun from 1.3.11 to 1.3.12 by @​dependabot[bot] in raineorshine/npm-check-updates#1663
• Bump globals from 17.4.0 to 17.5.0 by @​dependabot[bot] in raineorshine/npm-check-updates#1664
• Bump @​typescript-eslint/parser from 8.58.1 to 8.58.2 by @​dependabot[bot] in raineorshine/npm-check-updates#1665
• Bump prettier from 3.8.1 to 3.8.2 by @​dependabot[bot] in raineorshine/npm-check-updates#1667
• Bump verdaccio from 6.4.0 to 6.5.0 by @​dependabot[bot] in raineorshine/npm-check-updates#1669
• Bump sinon from 21.0.3 to 21.1.2 by @​dependabot[bot] in raineorshine/npm-check-updates#1668
• Skip CI on PRs with no file changes by @​Copilot in raineorshine/npm-check-updates#1672
• Bump @​typescript-eslint/eslint-plugin from 8.58.1 to 8.58.2 by @​dependabot[bot] in raineorshine/npm-check-updates#1666
• Fix wrong message when all packages are within cooldown window by @​Copilot in raineorshine/npm-check-updates#1671

Full Changelog: raineorshine/npm-check-updates@v21.0.0...v21.0.1

v21.0.0

⚠️ Breaking Changes

This is a major breaking change with significant architectural updates.

ESM Migration & Module System

• Pure ESM: Converted to pure ESM with dual-build support (ESM/CJS) via Vite 8.
• Import Syntax: Programmatic usage now requires named imports or namespace imports.
  • Old: import ncu from 'npm-check-updates'
  • New: import * as ncu from 'npm-check-updates' or import { run } from 'npm-check-updates'
• Node.js Requirements: Now requires ^20.19.0 || ^22.12.0 || >=24.0.0. This is required for native require(esm) support and the Rolldown engine.
• npm Requirements: Minimum version increased to >=10.0.0.

Configuration Files (.ncurc.js)

• Files named .ncurc.js that use module.exports will now fail in projects that are not "type": "module".
• Fix: Rename these files to .ncurc.cjs or convert them to use export default.

Dependency Updates (Pure ESM versions)

Package	Old Version	New Version
camelcase	^6.3.0	^9.0.0
chai	^4.3.10	^6.2.2
chai-as-promised	^7.1.2	^8.0.2
find-up	5.0.0	8.0.0

... (truncated)

Changelog

Sourced from npm-check-updates's changelog.

Changelog

This file only documents major version releases. For smaller releases, you're stuck reading the commit history.

[21.0.0] - 2026-04-14

⚠️ Breaking Changes

This is a major breaking change with significant architectural updates.

ESM Migration & Module System

• Pure ESM: Converted to pure ESM with dual-build support (ESM/CJS) via Vite 8.
• Import Syntax: Programmatic usage now requires named imports or namespace imports.
  • Old: import ncu from 'npm-check-updates'
  • New: import * as ncu from 'npm-check-updates' or import { run } from 'npm-check-updates'
• Node.js Requirements: Now requires ^20.19.0 || ^22.12.0 || >=24.0.0. This is required for native require(esm) support and the Rolldown engine.
• npm Requirements: Minimum version increased to >=10.0.0.

Configuration Files (.ncurc.js)

• Files named .ncurc.js that use module.exports will now fail in projects that are not "type": "module".
• Fix: Rename these files to .ncurc.cjs or convert them to use export default.

Dependency Updates (Pure ESM versions)

Package	Old Version	New Version
camelcase	^6.3.0	^9.0.0
chai	^4.3.10	^6.2.2
chai-as-promised	^7.1.2	^8.0.2
find-up	5.0.0	8.0.0
p-map	^4.0.0	^7.0.4
untildify	^4.0.0	^6.0.0

Tooling & Build Changes

• Vite 8 Upgrade: Migrated to Vite 8 with the new Rust-based Rolldown bundler (10-30x faster builds).
• TypeScript 6.0: Adopted latest type-system features and performance improvements.
• Strip ANSI: Replaced strip-ansi with Node.js built-in util.stripVTControlCharacters.
• Test Runner: Replaced vite-node with tsx for TypeScript support in ESM context.

---

Migration Guide

If you are upgrading to v21 from earlier versions:

1. Environment Check

... (truncated)

Commits

• e8d6477 21.0.2
• c0d6cb2 fix: skip intersects() for non-semver specs like catalog: in peer dep checks ...
• 3878bc7 21.0.1
• 67216d1 Fix wrong message when all packages are within cooldown window (#1671)
• 52e4653 Bump @​typescript-eslint/eslint-plugin from 8.58.1 to 8.58.2 (#1666)
• 68bea41 Skip CI on PRs with no file changes (#1672)
• eef7e4d Bump sinon from 21.0.3 to 21.1.2 (#1668)
• cc64806 Bump verdaccio from 6.4.0 to 6.5.0 (#1669)
• a55d025 Bump prettier from 3.8.1 to 3.8.2 (#1667)
• eb35739 Bump @​typescript-eslint/parser from 8.58.1 to 8.58.2 (#1665)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions