chore(deps): update all non-major dependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
@types/node (source)	24.10.7 → 24.10.9
bumpp	10.3.2 → 10.4.0
h3 (source)	1.15.4 → 1.15.5
ufo	1.6.2 → 1.6.3

---

Release Notes

antfu-collective/bumpp (bumpp)

v10.4.0

Compare Source

No significant changes

    View changes on GitHub

h3js/h3 (h3)

v1.15.5

Compare Source

compare changes

[!IMPORTANT]
Security: Fixed a bug in readBody(event) and readRawBody(event) utils where certain Transfer-Encoding header formats could cause the request body to be ignored.

In some deployments (for example, behind TCP load balancers or non-normalizing proxies), this could allow request smuggling. The handling is now safe and fully compliant. (read more)

🩹 Fixes

• readRawBody: Fix case-sensitive Transfer-Encoding check causing request smuggling risk (618ccf4)

unjs/ufo (ufo)

v1.6.3

Compare Source

compare changes

🩹 Fixes

• withBase, withoutBase: Prevent false prefix matches (#​313)

🏡 Chore

• Update deps (04b73bd)

❤️ Contributors

• Pooya Parsa (@​pi0)
• Florian Heuberger (@​Flo0806)

---

Configuration

📅 Schedule: Branch creation - "on Monday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.