fix(deps): update all non-major dependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
@rollup/rollup-darwin-arm64 (source)	4.55.1 → 4.57.1
@tanstack/react-query (source)	5.90.17 → 5.90.21
@tanstack/react-query-devtools (source)	5.91.2 → 5.91.3
@types/node (source)	22.19.7 → 22.19.11
@types/react (source)	19.2.8 → 19.2.14
cypress (source)	15.9.0 → 15.10.0
i18next-browser-languagedetector	8.2.0 → 8.2.1
pg (source)	8.17.1 → 8.18.0
prettier (source)	3.8.0 → 3.8.1
qs	6.14.2 → 6.15.0
react (source)	19.2.3 → 19.2.4
react-dom (source)	19.2.3 → 19.2.4
react-router (source)	7.12.0 → 7.13.0
react-router-dom (source)	7.12.0 → 7.13.0
rimraf	6.1.2 → 6.1.3
winston-loki	6.1.3 → 6.1.4

---

Release Notes

rollup/rollup (@​rollup/rollup-darwin-arm64)

v4.57.1

Compare Source

2026-01-30

Bug Fixes

• Fix heap corruption issue in Windows (#​6251)
• Ensure exports of a dynamic import are fully included when called from a try...catch (#​6254)

Pull Requests

• #​6251: fix: Isolate and cache process.report.getReport() calls in a child process for robust environment detection (@​alan-agius4, @​lukastaegert)
• #​6252: chore(deps): update dependency lru-cache to v11 (@​renovate[bot])
• #​6253: chore(deps): lock file maintenance minor/patch updates (@​renovate[bot], @​lukastaegert)
• #​6254: Fully include dynamic imports in a try-catch (@​lukastaegert)
• #​6255: chore(deps): lock file maintenance (@​renovate[bot])

v4.57.0

Compare Source

2026-01-27

Features

• Add import attributes to all plugin hooks that did not provide them yet (#​5700)
• Deprecate returning import attributes from load or transform hooks as that will no longer be supported with rollup 5 (#​5700)

Pull Requests

• #​5700: extend more hooks to include import attributes and add warnings (@​TrickyPi, @​lukastaegert)
• #​6243: fix(deps): update swc monorepo (major) (@​renovate[bot], @​lukastaegert)
• #​6244: fix(deps): lock file maintenance minor/patch updates (@​renovate[bot], @​lukastaegert)
• #​6245: chore(deps): lock file maintenance (@​renovate[bot])
• #​6246: Refactor to reduce Rollup 5 upgrade diff (@​lukastaegert)

v4.56.0

Compare Source

2026-01-22

Features

• Track object property inclusions of dynamic namespace members (#​6230)

Bug Fixes

• Handle methods that access dynamically imported namespace members via this (#​6230)

Pull Requests

• #​6230: Refine namespace handling (@​lukastaegert)

v4.55.3

Compare Source

2026-01-21

Bug Fixes

• Fix JSX semicolon insert position in variable declarations (#​6241)

Pull Requests

• #​6241: Fix JSX semicolon insertion (@​lukastaegert)

v4.55.2

Compare Source

2026-01-19

Bug Fixes

• Sort manual chunks by execution order to reduce circular dependency issues (#​6240)

Pull Requests

• #​6234: chore(deps): pin cross-platform-actions/action action to 492b0c8 (@​renovate[bot])
• #​6235: chore(deps): update dependency globals to v17 (@​renovate[bot], @​lukastaegert)
• #​6236: fix(deps): lock file maintenance minor/patch updates (@​renovate[bot])
• #​6237: chore(deps): lock file maintenance (@​renovate[bot])
• #​6239: fix(deps): lock file maintenance minor/patch updates (@​renovate[bot], @​lukastaegert)
• #​6240: Sort manual chunks by module execution order (@​TrickyPi)

TanStack/query (@​tanstack/react-query)

v5.90.21

Compare Source

Patch Changes

• refactor(react-query/useQueries): remove unreachable 'willFetch' branch in suspense promise collection (#​10082)

v5.90.20

Compare Source

Patch Changes

• Updated dependencies [e7258c5]:
  • @​tanstack/query-core@​5.90.20

v5.90.19

Compare Source

Patch Changes

• Updated dependencies [53fc74e]:
  • @​tanstack/query-core@​5.90.19

v5.90.18

Compare Source

Patch Changes

• Updated dependencies [dea1614]:
  • @​tanstack/query-core@​5.90.18

TanStack/query (@​tanstack/react-query-devtools)

v5.91.3

Compare Source

Patch Changes

• Updated dependencies [83366c4]:
  • @​tanstack/query-devtools@​5.93.0

cypress-io/cypress (cypress)

v15.10.0

Compare Source

Changelog: https://docs.cypress.io/app/references/changelog#15-10-0

i18next/i18next-browser-languageDetector (i18next-browser-languagedetector)

v8.2.1

Compare Source

• Add missing typescript definition for hash options 33154

brianc/node-postgres (pg)

v8.18.0

Compare Source

• Return the client instance as the result of calling connect (previously it was void).

v8.17.2

Compare Source

prettier/prettier (prettier)

v3.8.1

Compare Source

ljharb/qs (qs)

v6.15.0

Compare Source

• [New] parse: add strictMerge option to wrap object/primitive conflicts in an array (#​425, #​122)
• [Fix] duplicates option should not apply to bracket notation keys (#​514)

facebook/react (react)

v19.2.4: 19.2.4 (January 26th, 2026)

Compare Source

React Server Components

• Add more DoS mitigations to Server Actions, and harden Server Components (#​35632 by @​gnoff, @​lubieowoce, @​sebmarkbage, @​unstubbable)

remix-run/react-router (react-router)

v7.13.0

Compare Source

Minor Changes

• Add crossOrigin prop to Links component (#​14687)

Patch Changes

• Fix double slash normalization for useNavigate colon urls (#​14718)
• Update failed origin checks to return a 400 status instead of a 500 (#​14737)
• Bugfix #​14666: Inline criticalCss is missing nonce (#​14691)
• Loosen allowedActionOrigins glob check so ** matches all domains (#​14722)

remix-run/react-router (react-router-dom)

v7.13.0

Compare Source

Patch Changes

• Updated dependencies:
  • react-router@7.13.0

isaacs/rimraf (rimraf)

v6.1.3

Compare Source

JaniAnttonen/winston-loki (winston-loki)

v6.1.4

Compare Source

What's Changed

• Add structured metadata to logEntry by @​petekmet in #​173
• Fix data race in Batcher between pushLogEntry and sendBatchToLoki by @​JaniAnttonen in #​177
• Fix/update deprecated gh actions by @​JaniAnttonen in #​183
• Convert npm publish to use trusted publisher by @​JaniAnttonen in #​186

New Contributors

• @​petekmet made their first contribution in #​173

Full Changelog: JaniAnttonen/winston-loki@v6.1.3...v6.1.4

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.