build: update all non-major dependencies (main) #31737
Merged
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
5.1.19->5.1.207.9.0->7.10.01.21.0->1.21.14.0.7->4.0.85.42.0->5.43.00.25.12->0.26.00.25.12->0.26.03.4.3->3.4.45.1.3->5.1.44.52.5->4.53.17.2.1->7.2.24.0.7->4.0.8Release Notes
SBoudrias/Inquirer.js (@inquirer/confirm)
v5.1.20Compare Source
modelcontextprotocol/typescript-sdk (@modelcontextprotocol/sdk)
v1.21.1Compare Source
What's Changed
WWW-Authenticatescopeparam for SEP-835 by @chipgpt in #983New Contributors
Full Changelog: modelcontextprotocol/typescript-sdk@1.21.0...1.21.1
vitest-dev/vitest (@vitest/coverage-v8)
v4.0.8Compare Source
🐞 Bug Fixes
noExternalmerging bug on Vite 6 - by @hi-ogawa in #8950 (bcb13)expect.element()- by @StyleShit in #8954 (9638d)vi.fn(), fix types forvi.spyOn(obj, class)- by @sheremet-va in #8956 (75e7f)View changes on GitHub
algolia/algoliasearch-client-javascript (algoliasearch)
v5.43.0Compare Source
evanw/esbuild (esbuild)
v0.26.0Compare Source
Enable trusted publishing (#4281)
GitHub and npm are recommending that maintainers for packages such as esbuild switch to trusted publishing. With this release, a VM on GitHub will now build and publish all of esbuild's packages to npm instead of me. In theory.
Unfortunately there isn't really a way to test that this works other than to do it live. So this release is that live test. Hopefully this release is uneventful and is exactly the same as the previous one (well, except for the green provenance attestation checkmark on npm that happens with trusted publishing).
kriszyp/lmdb-js (lmdb)
v3.4.4Compare Source
piscinajs/piscina (piscina)
v5.1.4Compare Source
What's Changed
Full Changelog: piscinajs/piscina@v5.1.3...v5.1.4
rollup/rollup (rollup)
v4.53.1Compare Source
2025-11-07
Bug Fixes
Pull Requests
v4.53.0Compare Source
2025-11-07
Features
Pull Requests
vitejs/vite (vite)
v7.2.2Compare Source
Bug Fixes
Configuration
📅 Schedule: Branch creation - "after 6am and before 10am on Monday, Wednesday, Friday" in timezone Europe/Rome, Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR has been generated by Renovate Bot.