chore(deps): update npm packages

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
@nestjs/common (source)	11.1.6 -> 11.1.9
@nestjs/core (source)	11.1.6 -> 11.1.9
@nestjs/platform-express (source)	11.1.6 -> 11.1.9
@nestjs/testing (source)	11.1.6 -> 11.1.9
@types/node (source)	24.9.1 -> 24.10.1
@typescript-eslint/scope-manager (source)	8.46.2 -> 8.47.0
@vitest/browser (source)	4.0.6 -> 4.0.12
@vitest/browser-playwright (source)	4.0.6 -> 4.0.12
@vscode/vsce (source)	3.6.2 -> 3.7.0
alpinejs (source)	3.15.0 -> 3.15.2
antd (source)	5.27.5 -> 5.29.1
axios (source)	1.12.2 -> 1.13.2
dayjs (source)	1.11.18 -> 1.11.19
emnapi	1.6.0 -> 1.7.1
es-toolkit (source)	1.40.0 -> 1.42.0
esbuild	^0.25.0 -> ^0.27.0
eslint (source)	9.38.0 -> 9.39.1
happy-dom	20.0.7 -> 20.0.10
immer	10.1.3 -> 10.2.0
memfs	4.49.0 -> 4.51.0
pnpm (source)	10.20.0 -> 10.23.0
solid-js (source)	1.9.9 -> 1.9.10
terser (source)	5.44.0 -> 5.44.1
vitest (source)	4.0.1 -> 4.0.12
vitest (source)	4.0.10 -> 4.0.12
vue (source)	3.5.22 -> 3.5.24

---

Release Notes

nestjs/nest (@​nestjs/common)

v11.1.9

Compare Source

v11.1.9 (2025-11-14)

Bug fixes

• core
  • #​15865 fix(core): make get() throw for implicitly request-scoped trees (@​JoeNutt)

Enhancements

• common
  • #​15863 feat(common): add method options to @​sse decorator (@​TomerSteinberg)

Dependencies

• platform-fastify
  • #​15899 chore(deps): bump fastify from 5.6.1 to 5.6.2 (@​dependabot[bot])

Committers: 4

• Rami (@​JoeNutt)
• Rhynel Algopera (@​dev-rhynel)
• Tomer Steinberg (@​TomerSteinberg)
• WuMingDao (@​WuMingDao)

v11.1.8

Compare Source

v11.1.7

Compare Source

typescript-eslint/typescript-eslint (@​typescript-eslint/scope-manager)

v8.47.0

Compare Source

This was a version bump only for scope-manager to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

v8.46.4

Compare Source

This was a version bump only for scope-manager to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

v8.46.3

Compare Source

This was a version bump only for scope-manager to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

vitest-dev/vitest (@​vitest/browser)

v4.0.12

Compare Source

   🐞 Bug Fixes

• Inherit fsModuleCachePath by default  -  by @​sheremet-va in #​9063 (9a8bc)
• Don't import from @opentelemetry/api in public types  -  by @​sheremet-va in #​9066 (e944a)

    View changes on GitHub

v4.0.11

Compare Source

   🚀 Experimental Features

• api: Add extensible test artifact API  -  by @​macarie in #​8987 (77292)
  • See more at https://vitest.dev/api/advanced/artifacts
• expect: Provide task in MatchState  -  by @​macarie in #​9022 (afd1f)
• experimental: Support OpenTelemetry traces  -  by @​sheremet-va in #​8994 (d6d33)
  • See more at https://vitest.dev/guide/open-telemetry

   🏎 Performance

• experimental: Add file system cache  -  by @​sheremet-va in #​9026 (1b147)
  • See more at https://vitest.dev/config/experimental#experimental-fsmodulecache

    View changes on GitHub

v4.0.10

Compare Source

   🐞 Bug Fixes

• Remove onCancel when worker is terminated  -  by @​sheremet-va in #​9033 (6d7f0)
• browser:
  • Don't scale the iframe if UI is disabled  -  by @​sheremet-va in #​9018 (5406e)
  • Handle dependency stack traces with external source maps. Resolves: #​9003  -  by @​iclectic in #​9016 and #​9003 (57ae5)
• bun:
  • Parsing of stack trace for bun runtime  -  by @​nazarhussain in #​9032 (f3ec6)
• core:
  • Prevent starting new run when cancelling  -  by @​AriPerkkio in #​8991 (eb98d)
• pool:
  • Prevent writing to closed worker  -  by @​AriPerkkio and @​sheremet-va in #​9023 (042c6)
• reporters:
  • Report correct test run duration at the end  -  by @​sheremet-va in #​8969 (bc3a6)
• ui:
  • Use execution time from ws reporter (onFinished)  -  by @​userquin in #​8975 (f56dc)

    View changes on GitHub

v4.0.9

Compare Source

   🚀 Experimental Features

• expect: Add Set support to toBeOneOf  -  by @​tim-we and @​sheremet-va in #​8906 (a415d)

   🐞 Bug Fixes

• browser: Add favicon icons to the browser mode ui  -  by @​userquin in #​8972 (353ee)
• forks: Increase worker start timeout  -  by @​AriPerkkio in #​9027 (5e750)
• jsdom: Cloned request is an instance of Request  -  by @​sheremet-va in #​8985 (506a9)
• ui: Collect file/suite/test duration correctly  -  by @​userquin in #​8976 (8016d)

    View changes on GitHub

v4.0.8

Compare Source

   🐞 Bug Fixes

• Workaround noExternal merging bug on Vite 6  -  by @​hi-ogawa in #​8950 (bcb13)
• Missed context.d.ts file  -  by @​termorey in #​8965 (9044d)
• Incorrect error message for non-awaited expect.element()  -  by @​StyleShit in #​8954 (9638d)
• browser: Cleanup frame-ancestors from CSP header at coverage middleware  -  by @​userquin in #​8941 (1f730)
• deps: Update all non-major dependencies  -  by @​sheremet-va in #​8636 (da8b9)
• forks: Do not fail with Windows Defender enabled  -  by @​sheremet-va in #​8967 (c79f4)
• runner: Properly encode Uint8Array body in annotations  -  by @​Livan-pro in #​8951 (997ca)
• spy: Copy static properties if spy is initialised with vi.fn(), fix types for vi.spyOn(obj, class)  -  by @​sheremet-va in #​8956 (75e7f)
• webdriverio: When no argument is passed to the .click interaction command, the webdriver command should also have no argument  -  by @​julienw in #​8937 (069e6)

    View changes on GitHub

v4.0.7

Compare Source

   🐞 Bug Fixes

• Bind process in case global is overwritten  -  by @​AriPerkkio in #​8916 (6240d)
• Create environment once per worker with isolate: false  -  by @​sheremet-va in #​8915 (c9078)
• Add Locator as a possible element type in toContainElement() matcher  -  by @​vitalybaev in #​8910 and #​8927 (35a27)
• browser: Inherit isolate option, deprecate browser.isolate/browser.fileParallelism  -  by @​sheremet-va in #​8890 (9d2b4)
• cli: Parse --execArgv as array  -  by @​AriPerkkio in #​8924 (751c3)
• jsdom: Support URL.createObjectURL, FormData.set(prop, blob)  -  by @​sheremet-va in #​8935 (a1b73)
• pool: Avoid --require argument when running in deno  -  by @​pi0 in #​8897 (d41fa)
• typecheck: Handle re-runs outside tsc  -  by @​AriPerkkio in #​8920 (fdb2e)

   🏎 Performance

• pool:
  • Sort test files by project by default  -  by @​AriPerkkio in #​8914 (680a6)
• reporters:
  • Optimize getting the tests stats  -  by @​Connormiha in #​8908 (06d62)
  • Remove unnecessary Array.from call  -  by @​Connormiha in #​8907 (b6014)

    View changes on GitHub

Microsoft/vsce (@​vscode/vsce)

v3.7.0

Compare Source

Changes:

• #​1219: Remove invalid validation for extension dependencies
• #​1212: Validate extension dependencies use lowercase letters and warn about deprecated github.copilot
• #​1209: Bump validator from 13.9.0 to 13.15.20
• #​1200: Bump tar-fs from 2.1.3 to 2.1.4

This list of changes was auto generated.

alpinejs/alpine (alpinejs)

v3.15.2

Compare Source

Changes

• Imrove CSP bundle #​4704
• Add setErrorHandler #​4673

v3.15.1

Compare Source

Changed

• x-sort improvements
• CSP build allowGlobals now defaults to false instead of true

ant-design/ant-design (antd)

v5.29.1

Compare Source

• 🐞 Fix Carousel dot can not click when in vertical mode.#​55757 @​wanpan11

---

• 🐞 修复 Carousel 选择器在垂直位置无法点击的问题。 #​55757 @​wanpan11

v5.29.0

Compare Source

• 🆕 InputNumber component deprecates addonAfter and addonBefore props, use Space.Compact instead. #​55505 @​EmilyyyLiu
• ⌨️ Improve Drawer accessibility by adding aria-labelledby when a title is present. #​55697 @​rxy001
• 🌐 Fixed spacing in Korean localization for “복사됨” message. #​55672 @​rapsealk

---

• 🆕 InputNumber 组件废弃 addonAfter 和 addonBefore 属性，使用 Space.Compact 替换。 #​55505 @​EmilyyyLiu
• ⌨️ 优化 Drawer 组件的可访问性，存在标题时的属性 aria-labelledby。#​55697 @​rxy001
• 🌐 修复韩语本地化中“복사됨”文本的空格规则问题。#​55672 @​rapsealk

v5.28.1

Compare Source

• Carousel
  • 🐞 Fix Carousel style issue in vertical mode. #​55615 @​wanpan11
  • 🐞 Fix Carousel dots animation missing when first render. #​55589 @​wanpan11
• 🐞 Fix Descriptions where content style wrongly used labelStyle. #​55572 @​li-jia-nan
• 💄 Adjust the height of the Select component to 32px when variant="underlined". #​55607 @​ustcfury
• 💄 When the underlined property is enabled for the Input component, the border color changes on mouse hover. #​55609 @​ustcfury
• 🛠 Flex gap prop support number type. #​55591 @​ayangweb
• 🌐 Add missing TimePicker translations for locales: ar_EG, en_GB, gl_ES, bg_BG, ca_ES, cs_CZ, el_GR, es_ES, eu_ES, fi_FI, he_IL, hu_HU, is_IS, kn_IN, kmr_IQ, lv_LV, mk_MK, mn_MN, ms_MY, pl_PL, pt_BR, pt_PT, ro_RO, sk_SK, sl_SI, sv_SE, ta_IN, th_TH, zh_TW, et_EE. #​55656 @​li-jia-nan

---

• Carousel
  • 🐞 修复 Carousel 组件纵向样式问题。#​55615 @​wanpan11
  • 🐞 修复 Carousel 首次渲染时指示点动画丢失。#​55589 @​wanpan11
• 🐞 修复 Popconfirm 在 actionFn 出错时未重置 ref 的问题。#​55519 @​Taoister39
• 🐞 修复 Descriptions 组件内容样式错误使用 labelStyle 的问题。#​55572 @​li-jia-nan
• 💄 修正 underlined 变体的 Select 组件高度为 32px。#​55607 @​ustcfury
• 💄 为 underlined 变体的 Input 组件补全 hover 边框颜色样式。#​55609 @​ustcfury
• 🛠 Flex gap 属性支持 number 类型。#​55591 @​ayangweb
• 🌐 补充 TimePicker 多语言翻译，覆盖以下语言：ar_EG、en_GB、gl_ES、bg_BG、ca_ES、cs_CZ、el_GR、es_ES、eu_ES、fi_FI、he_IL、hu_HU、is_IS、kn_IN、kmr_IQ、lv_LV、mk_MK、mn_MN、ms_MY、pl_PL、pt_BR、pt_PT、ro_RO、sk_SK、sl_SI、sv_SE、ta_IN、th_TH、zh_TW、et_EE。#​55656 @​li-jia-nan

v5.28.0

Compare Source

v5.27.6

Compare Source

• Table
  • 🐞 Fix Table pagination.align is not working. #​55316
  • 🛠 Add Table missing useMemo capability to spinProps. #​55344
• 🛠 Refactor Modal useMemo of ConfirmDialog to resolve useMemo invalid where Object.values ​​generates a new array. #​55376
• TypeScript
  • 🤖 Add ConfigProvider the Window type definition in getTargetContainer of . #​55313
  • 🤖 Add ConfigProvider the ShadowRoot type definition in getTargetContainer and getPopupContainer. #​55278 @​leshalv
  • 🤖 Improve Modal type definition. #​55371

---

• Table
  • 🐞 修复 Table pagination.align 属性失效的问题。#​55316
  • 🛠 补充 Table 中 spinProps 的 useMemo 缺失能力。#​55344
• 🛠 重构 Modal 中 ConfirmDialog 的 useMemo，以解决 Object.values 生成新数组导致 useMemo 失效的问题。#​55376
• TypeScript
  • 🤖 补充 ConfigProvider getTargetContainer 中 Window 类型定义。#​55313
  • 🤖 补充 ConfigProvider 的 getTargetContainer 和 getPopupContainer 中 ShadowRoot 类型定义。#​55278 @​leshalv
  • 🤖 优化 Modal 中类型定义。#​55371

axios/axios (axios)

v1.13.2

Compare Source

Bug Fixes

• http: fix 'socket hang up' bug for keep-alive requests when using timeouts; (#​7206) (8d37233)
• http: use default export for http2 module to support stubs; (#​7196) (0588880)

Performance Improvements

• http: fix early loop exit; (#​7202) (12c314b)

Contributors to this release

• Dmitriy Mozgovoy
• Kasper Isager Dalsgarð

v1.13.1

Compare Source

Bug Fixes

• http: fixed a regression that caused the data stream to be interrupted for responses with non-OK HTTP statuses; (#​7193) (bcd5581)

Contributors to this release

• Anchal Singh
• Dmitriy Mozgovoy

v1.13.0

Compare Source

Bug Fixes

• fetch: prevent TypeError when config.env is undefined (#​7155) (015faec)
• resolve issue #​7131 (added spacing in mergeConfig.js) (#​7133) (9b9ec98)

Features

• http: add HTTP2 support; (#​7150) (d676df7)

Contributors to this release

• Dmitriy Mozgovoy
• Noritaka Kobayashi
• Aviraj2929
• prasoon patel
• Samyak Dandge
• Anchal Singh
• Rahul Kumar
• Amit Verma
• Abhishek3880
• Dhvani Maktuporia
• Usama Ayoub
• ikuy1203
• Nikhil Simon Toppo
• Jane Wangari
• Supakorn Ieamgomol
• Kian-Meng Ang
• UTSUMI Keiji

1.12.2 (2025-09-14)

Bug Fixes

• fetch: use current global fetch instead of cached one when env fetch is not specified to keep MSW support; (#​7030) (cf78825)

Contributors to this release

• Dmitriy Mozgovoy
• Noritaka Kobayashi

1.12.1 (2025-09-12)

Bug Fixes

• types: fixed env config types; (#​7020) (b5f26b7)

Contributors to this release

• Dmitriy Mozgovoy

iamkun/dayjs (dayjs)

v1.11.19

Compare Source

Bug Fixes

• added usage warnings for diff + updated unit tests (#​2948) (269a7a9)
• dont instantiate regexes within ar locale functions to avoid performance overhead (#​2898) (af5e9f0)
• replace italian locale "un' ora fa" with "un'ora fa", add tests for it (#​2930) (9e9f76c)
• Updated Belarusian locale with relative time (#​2656) (1d8746c)

toyobayashi/emnapi (emnapi)

v1.7.1

Compare Source

What's Chang

---

Configuration

📅 Schedule: Branch creation - "before 10am on monday" in timezone Asia/Shanghai, Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[graphite-app]

How to use the Graphite Merge Queue

Add either label to this PR to merge it via the merge queue:

• 0-merge - adds this PR to the back of the merge queue
• hotfix - for urgent hot fixes, skip the queue and merge this PR next

You must have a Graphite account in order to use the merge queue. Sign up using this link.

An organization admin has enabled the Graphite Merge Queue in this repository.

Please do not merge from GitHub as this will restart CI on PRs being processed by the merge queue.