chore(deps): update all non-major dependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
@antfu/eslint-config	^2.25.1 -> ^2.26.0
@ts-rest/core (source)	^3.49.3 -> ^3.50.0
@ts-rest/express (source)	^3.49.3 -> ^3.50.0
@ts-rest/open-api (source)	^3.49.3 -> ^3.50.0
@types/node (source)	^20.14.15 -> ^20.16.1
@vitejs/plugin-legacy (source)	^5.4.1 -> ^5.4.2
axios (source)	^1.7.3 -> ^1.7.4
bullmq (source)	^5.12.5 -> ^5.12.9
pinia	^2.2.1 -> ^2.2.2
pnpm (source)	9.7.0 -> 9.7.1
puppeteer (source)	^23.0.2 -> ^23.1.0
sharp (source, changelog)	^0.33.4 -> ^0.33.5
type-fest	^4.24.0 -> ^4.25.0
vite (source)	^5.4.0 -> ^5.4.1
vite-plugin-mkcert	^1.17.5 -> ^1.17.6
vitepress (source)	^1.3.2 -> ^1.3.3
winston	^3.14.1 -> ^3.14.2

---

Release Notes

antfu/eslint-config (@​antfu/eslint-config)

v2.26.0

Compare Source

   🐞 Bug Fixes

• ignoresTypeAware reslove, fix #​578  -  by @​antfu in https://github.com/antfu/eslint-config/issues/578 (e5ca2)
• Check packages existence in local scope  -  by @​paescuj and @​antfu in https://github.com/antfu/eslint-config/issues/583 (12fd8)

    View changes on GitHub

v2.25.2

Compare Source

   🐞 Bug Fixes

• Migrate plugin eslint-comments  -  by @​ntnyq in https://github.com/antfu/eslint-config/issues/577 (015e2)

    View changes on GitHub

ts-rest/ts-rest (@​ts-rest/core)

v3.50.0

Compare Source

Minor Changes

• 83f6675: Do not require body to be defined for DELETE endpoints in contracts

v3.49.4

Compare Source

Patch Changes

• 52a2b35: Fix broken types on TS 5.5 in Node environments without lib.dom

ts-rest/ts-rest (@​ts-rest/express)

v3.50.0

Compare Source

v3.49.4

Compare Source

ts-rest/ts-rest (@​ts-rest/open-api)

v3.50.0

Compare Source

v3.49.4

Compare Source

vitejs/vite (@​vitejs/plugin-legacy)

v5.4.2

• chore: extend commit hash (#​17709) (4fc9b64), closes #​17709
• chore(deps): update all non-major dependencies (#​17820) (bb2f8bb), closes #​17820
• fix: handle encoded base paths (#​17577) (720447e), closes #​17577
• fix(deps): update all non-major dependencies (#​17430) (4453d35), closes #​17430
• fix(deps): update all non-major dependencies (#​17494) (bf123f2), closes #​17494
• fix(deps): update all non-major dependencies (#​17629) (93281b0), closes #​17629
• fix(deps): update all non-major dependencies (#​17780) (e408542), closes #​17780
• perf: improve regex performance (#​17789) (952bae3), closes #​17789
• docs: rename cdnjs link (#​17565) (61357f6), closes #​17565

axios/axios (axios)

v1.7.4

Compare Source

Bug Fixes

• sec: CVE-2024-39338 (#​6539) (#​6543) (6b6b605)
• sec: disregard protocol-relative URL to remediate SSRF (#​6539) (07a661a)

Contributors to this release

• Lev Pachmanov
• Đỗ Trọng Hải

taskforcesh/bullmq (bullmq)

v5.12.9

Compare Source

Performance Improvements

• fifo-queue: use linked list structure for queue (#​2629) (df74578)

v5.12.8

Compare Source

Bug Fixes

• flow: recursive ignoreDependencyOnFailure option (#​2712) (53bc9eb)

v5.12.7

Compare Source

Bug Fixes

• job: throw error if removeDependencyOnFailure and ignoreDependencyOnFailure are used together (#​2711) (967632c)

v5.12.6

Compare Source

vuejs/pinia (pinia)

v2.2.2

Compare Source

Please refer to CHANGELOG.md for details.

pnpm/pnpm (pnpm)

v9.7.1

Compare Source

puppeteer/puppeteer (puppeteer)

v23.1.0: puppeteer: v23.1.0

Compare Source

Features

• improve type inference for selectors by adopting "typed-query-selector" (#​12950) (77b729e)

Dependencies

• The following workspace dependencies were updated
  • dependencies
    • @​puppeteer/browsers bumped from 2.3.0 to 2.3.1
    • puppeteer-core bumped from 23.0.2 to 23.1.0

lovell/sharp (sharp)

v0.33.5

Compare Source

sindresorhus/type-fest (type-fest)

v4.25.0

Compare Source

• Add StringRepeat type (#​938) a83e87e
• Add Arrayable type #​270 (#​935) 9aabcb9

vitejs/vite (vite)

v5.4.1

• fix: build.modulePreload.resolveDependencies is optimizable (#​16083) (e961b31), closes #​16083
• fix: align CorsOptions.origin type with @​types/cors (#​17836) (1bda847), closes #​17836
• fix: typings for vite:preloadError (#​17868) (6700594), closes #​17868
• fix(build): avoid re-define __vite_import_meta_env__ (#​17876) (e686d74), closes #​17876
• fix(deps): update all non-major dependencies (#​17869) (d11711c), closes #​17869
• fix(lightningcss): search for assets with correct base path (#​17856) (4e5ce3c), closes #​17856
• fix(worker): handle self reference url worker in dependency for build (#​17846) (391bb49), closes #​17846
• chore: fix picocolors import for local dev (#​17884) (9018255), closes #​17884
• refactor: remove handleHotUpdate from watch-package-data plugin (#​17865) (e16bf1f), closes #​17865

liuweiGL/vite-plugin-mkcert (vite-plugin-mkcert)

v1.17.6

Compare Source

Bug Fixes

• SSRF in axios (696513f), closes #​93

Performance Improvements

• update code style (2ccce41)
• upgrade dependencies (baa7dfd)

vuejs/vitepress (vitepress)

v1.3.3

Compare Source

Miscellaneous

• bump deps (a20db24)

winstonjs/winston (winston)

v3.14.2

Compare Source

---

Configuration

📅 Schedule: Branch creation - "before 4am on Monday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.