build: update all non-major dependencies

[angular-robot]

This PR contains the following updates:

Package	Type	Update	Change
@types/node (source)	dependencies	patch	22.15.29 -> 22.15.30
firebase (source, changelog)	devDependencies	minor	11.8.1 -> 11.9.0
github/codeql-action	action	patch	v3.28.18 -> v3.28.19
renovate (source)	dependencies	minor	40.37.1 -> 40.42.3
terser (source)	devDependencies	minor	5.40.0 -> 5.41.0

---

Release Notes

firebase/firebase-js-sdk (firebase)

v11.9.0

Compare Source

For more detailed release notes, see Firebase JavaScript SDK Release Notes.

What's Changed

@​firebase/ai@​1.4.0

Minor Changes

• 1933324 #​9026 - Add support for minItems and maxItems to Schema.

• 40be2db #​9047 - Add title, maximum, minimum, propertyOrdering to Schema builder

[email protected]

Minor Changes

• 1933324 #​9026 - Add support for minItems and maxItems to Schema.

• 40be2db #​9047 - Add title, maximum, minimum, propertyOrdering to Schema builder

Patch Changes

• Updated dependencies [1933324, 9964849, 40be2db]:
• @​firebase/ai@​1.4.0
• @​firebase/app@​0.13.1
• @​firebase/firestore@​4.7.17
• @​firebase/app-compat@​0.4.1
• @​firebase/firestore-compat@​0.3.52

@​firebase/app@​0.13.1

Patch Changes

• Update SDK_VERSION.

@​firebase/app-compat@​0.4.1

Patch Changes

• Updated dependencies []:
• @​firebase/app@​0.13.1

@​firebase/firestore@​4.7.17

Patch Changes

• 9964849 #​9041 - Clean up leaked WebChannel instances when the Firestore instance is terminated.

@​firebase/firestore-compat@​0.3.52

Patch Changes

• Updated dependencies [9964849]:
• @​firebase/firestore@​4.7.17

github/codeql-action (github/codeql-action)

v3.28.19

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.28.19 - 03 Jun 2025

• The CodeQL Action no longer includes its own copy of the extractor for the actions language, which is currently in public preview.
  The actions extractor has been included in the CodeQL CLI since v2.20.6. If your workflow has enabled the actions language and you have pinned
  your tools: property to a specific version of the CodeQL CLI earlier than v2.20.6, you will need to update to at least CodeQL v2.20.6 or disable
  actions analysis.
• Update default CodeQL bundle version to 2.21.4. #​2910

See the full CHANGELOG.md for more information.

renovatebot/renovate (renovate)

v40.42.3

Compare Source

Bug Fixes

• workers/auto-replace: Correctly replace with digest and without replaceString (#​35652) (54fe784)

Documentation

• Reviewers are only added during PR/MR creation, but not modified afterwards (#​36108) (4be24ab)

Code Refactoring

• lift up properties for re-use in getReleaseNotesMd() (#​36140) (62ef8e7)

v40.42.2

Compare Source

Build System

• deps: update dependency zod to v3.25.36 (main) (#​36326) (f6224a9)

v40.42.1

Compare Source

Build System

• deps: update dependency zod to v3.25.35 (main) (#​36324) (eb9c35f)

v40.42.0

Compare Source

Features

• gitlab: implement pr cache (#​34747) (03d27b3)

v40.41.4

Compare Source

Bug Fixes

• prefer lockedVersion for currentVersion (#​36102) (cdf9a05)
• util/host-rules: compare normalized URLs when matching hostRules (#​36311) (b7347fd)

v40.41.3

Compare Source

Build System

• deps: update dependency zod to v3.25.34 (main) (#​36320) (00aa916)

v40.41.2

Compare Source

Build System

• deps: update dependency protobufjs to v7.5.3 (main) (#​36319) (23a38f3)

v40.41.1

Compare Source

Documentation

• add info about semantic commits feature not working together with commitMessagePrefix (#​36307) (d60cf90)

Miscellaneous Chores

• deps: update dependency @​types/node to v22.15.24 (main) (#​36314) (9130456)
• deps: update python docker tag to v3.13.4 (main) (#​36316) (f5b0f8e)
• deps: update python:3.13 docker digest to eb120d0 (main) (#​36315) (b41a900)
• replace eslint import plugin (#​36312) (1174198)

Build System

• deps: update dependency zod to v3.25.33 (main) (#​36318) (0ffd4ee)

v40.41.0

Compare Source

Features

• presets: add scalar as monorepo (#​36297) (94549e6)

Bug Fixes

• bumpVersions: correctly default to patch (#​36303) (cdbaa1f)

Documentation

• Update aws-rds docs to use packageName instead of lookupName (#​36301) (ef41daa)

v40.40.3

Compare Source

Build System

• deps: update dependency zod to v3.25.32 (main) (#​36304) (9c3e38a)

v40.40.2

Compare Source

Miscellaneous Chores

• deps: update dependency @​types/node to v22.15.22 (main) (#​36295) (54eab81)
• deps: update dependency @​types/node to v22.15.23 (main) (#​36299) (cfb9e56)
• deps: update dependency typescript-eslint to v8.33.0 (main) (#​36296) (a962498)
• deps: update github/codeql-action action to v3.28.19 (main) (#​36291) (30bcef9)

Build System

• deps: update dependency zod to v3.25.31 (main) (#​36302) (849eefa)

v40.40.1

Compare Source

Bug Fixes

• Update surveyjs monorepo url (#​36274) (5ba9b66)

Miscellaneous Chores

• deps: update aquasecurity/trivy-action action to v0.31.0 (main) (#​36285) (e87a41b)

v40.40.0

Compare Source

Features

• gitea: Support repos with fast forward only merge (#​36272) (c798912)

Miscellaneous Chores

• deps: update dependency esbuild to v0.25.5 (main) (#​36282) (05321e2)

v40.39.2

Compare Source

Build System

• deps: update dependency zod to v3.25.30 (main) (#​36281) (4b966d5)

v40.39.1

Compare Source

Build System

• deps: update dependency zod to v3.25.29 (main) (#​36280) (0633979)

v40.39.0

Compare Source

Features

• presets: add TanStack/virtual monorepo (#​36277) (2d403ca)

v40.38.0

Compare Source

Features

• manager/npm: extract constraints from devEngines (#​36004) (9bc87fe)

Bug Fixes

• Support encrypted values in inherited config (#​36251) (da8d534)

Documentation

• Mention that allowedVersions and matchUpdateTypes can't be used together (#​36254) (53cdc73)
• update references to renovate/renovate (main) (#​36264) (6f424f7)
• updated matchSourceUrls config option (#​36257) (35e70e8)

Miscellaneous Chores

• deps: lock file maintenance (main) (#​36265) (2de0696)
• deps: update dependency eslint-import-resolver-typescript to v4.4.1 (main) (#​36267) (3b6b00b)

terser/terser (terser)

v5.41.0

Compare Source

• fixed semicolon insertion between class fields, when the field names are number literals
• keep_numbers format option now works for bigint
• internal: correctly mark accessors' is_generator property
• internal: do not read or assign quote properties without need
• internal: add missing equivalent_to comparison

---

Configuration

📅 Schedule: Branch creation - "after 10:00pm every weekday,before 5:00am every weekday,every weekend" in timezone America/Tijuana, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot.

[josephperrott]

LGTM

[josephperrott]

This PR was merged into the repository by commit e1edfd9.

The changes were merged into the following branches: main

[angular-automatic-lock-bot]

This issue has been automatically locked due to inactivity.
Please file a new issue if you are encountering a similar or related problem.

Read more about our automatic conversation locking policy.

_{This action has been performed automatically by a bot.}