Update development dependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence	Type	Update	Pending
@types/web	0.0.345 → 0.0.347					devDependencies	patch
actions/setup-node	v6.3.0 → v6.4.0					action	minor
cerbos/actions (changelog)	77f6019 → 0dde32b					action	digest
eslint-plugin-react-hooks (source)	7.0.1 → 7.1.1					devDependencies	minor
pnpm (source)	10.33.0+sha512.10568bb4a6afb58c9eb3630da90cc9516417abebd3fabbe6739f0ae795728da1491e9db5a544c76ad8eb7570f5c4bb3d6c637b2cb41bfdcdb47fa823c8649319 → 10.33.1					packageManager	patch	10.33.2
pnpm (source)	10.33.0 → 10.33.1					engines	patch	10.33.2
ruby	4.0.2-alpine → 4.0.3-alpine						patch
traefik	v3.6.12 → v3.6.13						patch	v3.6.14 (+1)
typescript (source)	6.0.2 → 6.0.3					devDependencies	patch
typescript-eslint (source)	8.58.2 → 8.59.0					devDependencies	minor
vitest (source)	4.1.4 → 4.1.5					devDependencies	patch

---

Release Notes

microsoft/TypeScript-DOM-Lib-Generator (@​types/web)

v0.0.347

Compare Source

asynciterable.d.ts

No changes

index.d.ts

No changes

iterable.d.ts

No changes

ts5.5/asynciterable.d.ts

No changes

ts5.5/index.d.ts

No changes

ts5.5/iterable.d.ts

No changes

ts5.6/asynciterable.d.ts

No changes

ts5.6/index.d.ts

No changes

ts5.6/iterable.d.ts

No changes

ts5.9/asynciterable.d.ts

No changes

ts5.9/index.d.ts

No changes

ts5.9/iterable.d.ts

No changes

v0.0.346

Compare Source

asynciterable.d.ts

No changes

index.d.ts

No changes

iterable.d.ts

No changes

ts5.5/asynciterable.d.ts

No changes

ts5.5/index.d.ts

No changes

ts5.5/iterable.d.ts

No changes

ts5.6/asynciterable.d.ts

No changes

ts5.6/index.d.ts

No changes

ts5.6/iterable.d.ts

No changes

ts5.9/asynciterable.d.ts

No changes

ts5.9/index.d.ts

No changes

ts5.9/iterable.d.ts

No changes

actions/setup-node (actions/setup-node)

v6.4.0

Compare Source

facebook/react (eslint-plugin-react-hooks)

v7.1.1

Compare Source

Note: 7.1.0 accidentally removed the component-hook-factories rule, causing errors for users who referenced it in their ESLint config. This is now fixed.

• Add deprecated no-op component-hook-factories rule for backwards compatibility. (@​mofeiZ in #​36307)

v7.1.0

Compare Source

This release adds ESLint v10 support, improves performance by skipping compilation for non-React files, and includes compiler lint improvements including better set-state-in-effect detection, improved ref validation, and more helpful error reporting.

• Add ESLint v10 support. (@​nicolo-ribaudo in #​35720)
• Skip compilation for non-React files to improve performance. (@​josephsavona in #​35589)
• Fix exhaustive deps bug with Flow type casting. (@​jorge-cab in #​35691)
• Fix useEffectEvent checks in component syntax. (@​jbrown215 in #​35041)
• Improved set-state-in-effect validation with fewer false negatives. (@​jorge-cab in #​35134, @​josephsavona in #​35147, @​jackpope in #​35214, @​chesnokov-tony in #​35419, @​jsleitor in #​36107)
• Improved ref validation for non-mutating functions and event handler props. (@​josephsavona in #​35893, @​kolvian in #​35062)
• Compiler now reports all errors instead of stopping at the first. (@​josephsavona in #​35873–#​35884)
• Improved source locations and error display in compiler diagnostics. (@​nathanmarks in #​35348, @​josephsavona in #​34963)

pnpm/pnpm (pnpm)

v10.33.1: pnpm 10.33.1

Compare Source

Patch Changes

• When a project's packageManager field selects pnpm v11 or newer, commands that v10 would have passed through to npm (version, login, logout, publish, unpublish, deprecate, dist-tag, docs, ping, search, star, stars, unstar, whoami, etc.) are now handed over to the wanted pnpm, which implements them natively. Previously they silently shelled out to npm — making, for example, pnpm version --help print npm's help on a project with packageManager: pnpm@11.0.0-rc.3 #​11328.

Platinum Sponsors

Gold Sponsors

containous/traefik (traefik)

v3.6.13

Compare Source

All Commits

Bug fixes:

• [middleware] Bump github.com/klauspost/compress v1.18.4 and fix TestNegotiation (#​12937 @​thaJeztah)

Documentation:

• [docker] Fix docker-compose.yaml location in Docker setup page (#​12860 @​ScottA38)
• [docker, consul, ecs, k8s] Fix documentation on how to restrict the scope of service discovery (#​12645 @​mloiseleur)
• [k8s/ingress-nginx] Add OVHcloud (OpenStack Octavia) to Cloud-Specific IP Management (#​12759 @​antonin-a)
• [k8s/ingress-nginx] Clarify IngressClass selection logic (#​12926 @​kevinpollet)
• Add missing redirects for Getting started (#​12886 @​nmengin)
• Add redirects for deleted pages (#​12889 @​sheddy-traefik)
• Fix default value of http.sanitizePath (#​12904 @​iTob191)

v3.6.13

Compare Source

All Commits

Bug fixes:

• [middleware] Bump github.com/klauspost/compress v1.18.4 and fix TestNegotiation (#​12937 @​thaJeztah)

Documentation:

• [docker] Fix docker-compose.yaml location in Docker setup page (#​12860 @​ScottA38)
• [docker, consul, ecs, k8s] Fix documentation on how to restrict the scope of service discovery (#​12645 @​mloiseleur)
• [k8s/ingress-nginx] Add OVHcloud (OpenStack Octavia) to Cloud-Specific IP Management (#​12759 @​antonin-a)
• [k8s/ingress-nginx] Clarify IngressClass selection logic (#​12926 @​kevinpollet)
• Add missing redirects for Getting started (#​12886 @​nmengin)
• Add redirects for deleted pages (#​12889 @​sheddy-traefik)
• Fix default value of http.sanitizePath (#​12904 @​iTob191)

microsoft/TypeScript (typescript)

v6.0.3

Compare Source

typescript-eslint/typescript-eslint (typescript-eslint)

v8.59.0

Compare Source

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

vitest-dev/vitest (vitest)

v4.1.5

Compare Source

   🚀 Experimental Features

• coverage: Istanbul to support instrumenter option  -  by @​BartWaardenburg and @​AriPerkkio in #​10119 (0e0ff)

   🐞 Bug Fixes

• --project negation excludes browser instances  -  by @​felamaslen in #​10131 (9423d)
• Project color label on html reporter  -  by @​hi-ogawa in #​10142 (596f7)
• Fix vi.defineHelper called as object method  -  by @​hi-ogawa in #​10163 (122c2)
• Alias agent reporter to minimal  -  by @​sheremet-va in #​10157 (663b9)
• Respect diff config options in soft assertions  -  by @​Copilot, sheremet-va and @​sheremet-va in #​8696 (9787d)
• Respect diff config options in soft assertions "  -  by @​sheremet-va in #​8696 (7dc6d)
• ast-collect: Recognize _vi_import prefix in static test discovery  -  by @​Yejneshwar in #​10129 (32546)
• coverage: Descriptive error message when reports directory is removed during test run  -  by @​DaveT1991 and @​AriPerkkio in #​10117 (14133)
• snapshot: Increase default snapshot max output length  -  by @​hi-ogawa and Codex in #​10150 (21e66)
• ui: Fix jsx/tsx syntax highlight  -  by @​hi-ogawa in #​10152 (f1b1f)
• web-worker: Support MessagePort objects referenced inside postMessage data  -  by @​whitphx and Claude Opus 4.6 (1M context) in #​9927 and #​10124 (7ad7d)
• api: Make test-specification options writable  -  by @​sheremet-va in #​10154 (6abd5)

    View changes on GitHub

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • Between 12:00 AM and 03:59 AM, only on Monday (* 0-3 * * 1)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.