Bump npm-check-updates from 19.6.6 to 21.0.3

[dependabot]

Bumps npm-check-updates from 19.6.6 to 21.0.3.

Release notes

Sourced from npm-check-updates's releases.

v21.0.3

What's Changed

• fix: chmod build/cli.js executable after vite build by @​raineorshine in raineorshine/npm-check-updates#1678
• fix: migrate from rc-config-loader to cosmiconfig for ESM config support (closes #1674) by @​onemen in raineorshine/npm-check-updates#1676

Full Changelog: raineorshine/npm-check-updates@v21.0.2...v21.0.3

v21.0.2

What's Changed

• fix: skip intersects() for non-semver specs like catalog: in peer dep checks by @​terminalchai in raineorshine/npm-check-updates#1675

Full Changelog: raineorshine/npm-check-updates@v21.0.1...v21.0.2

v21.0.1

What's Changed

• fix: seeing catalog when inside workspaces by @​Zamiell in raineorshine/npm-check-updates#1656
• Bump @​types/bun from 1.3.11 to 1.3.12 by @​dependabot[bot] in raineorshine/npm-check-updates#1663
• Bump globals from 17.4.0 to 17.5.0 by @​dependabot[bot] in raineorshine/npm-check-updates#1664
• Bump @​typescript-eslint/parser from 8.58.1 to 8.58.2 by @​dependabot[bot] in raineorshine/npm-check-updates#1665
• Bump prettier from 3.8.1 to 3.8.2 by @​dependabot[bot] in raineorshine/npm-check-updates#1667
• Bump verdaccio from 6.4.0 to 6.5.0 by @​dependabot[bot] in raineorshine/npm-check-updates#1669
• Bump sinon from 21.0.3 to 21.1.2 by @​dependabot[bot] in raineorshine/npm-check-updates#1668
• Skip CI on PRs with no file changes by @​Copilot in raineorshine/npm-check-updates#1672
• Bump @​typescript-eslint/eslint-plugin from 8.58.1 to 8.58.2 by @​dependabot[bot] in raineorshine/npm-check-updates#1666
• Fix wrong message when all packages are within cooldown window by @​Copilot in raineorshine/npm-check-updates#1671

Full Changelog: raineorshine/npm-check-updates@v21.0.0...v21.0.1

v21.0.0

⚠️ Breaking Changes

This is a major breaking change with significant architectural updates.

ESM Migration & Module System

• Pure ESM: Converted to pure ESM with dual-build support (ESM/CJS) via Vite 8.
• Import Syntax: Programmatic usage now requires named imports or namespace imports.
  • Old: import ncu from 'npm-check-updates'
  • New: import * as ncu from 'npm-check-updates' or import { run } from 'npm-check-updates'
• Node.js Requirements: Now requires ^20.19.0 || ^22.12.0 || >=24.0.0. This is required for native require(esm) support and the Rolldown engine.
• npm Requirements: Minimum version increased to >=10.0.0.

Configuration Files (.ncurc.js)

• Files named .ncurc.js that use module.exports will now fail in projects that are not "type": "module".
• Fix: Rename these files to .ncurc.cjs or convert them to use export default.

... (truncated)

Commits

• 5cde018 21.0.3
• 5e41802 fix: migrate from rc-config-loader to cosmiconfig for ESM config support (clo...
• b9a344d fix: chmod build/cli.js executable after vite build (#1678)
• e8d6477 21.0.2
• c0d6cb2 fix: skip intersects() for non-semver specs like catalog: in peer dep checks ...
• 3878bc7 21.0.1
• 67216d1 Fix wrong message when all packages are within cooldown window (#1671)
• 52e4653 Bump @​typescript-eslint/eslint-plugin from 8.58.1 to 8.58.2 (#1666)
• 68bea41 Skip CI on PRs with no file changes (#1672)
• eef7e4d Bump sinon from 21.0.3 to 21.1.2 (#1668)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Superseded by #442.