fix(deps): update non-major dependencies

[renovate]

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Age	Confidence
@types/nodemailer (source)	^8.0.1 → ^8.0.2
@unocss/astro (source)	^66.10.2 → ^66.10.5
firebase-functions	^7.3.2 → ^7.4.0
image-size	^2.0.2 → ^2.0.4
turbo (source)	^2.10.12 → ^2.11.0
unocss (source)	^66.10.2 → ^66.10.5
yaml (source)	^2.9.0 → ^2.9.1

---

Release Notes

unocss/unocss (@​unocss/astro)

v66.10.5

Compare Source

   🐞 Bug Fixes

• inspector:
  • Request auth code from newer devframe hosts  -  by @​antfubot in #​5348 (b3a16)
  • Rework auth gate and request code from newer devframe hosts  -  by @​antfubot in #​5349 (eeea8)

    View changes on GitHub

v66.10.4

Compare Source

   🐞 Bug Fixes

• vite: Repair global mode HMR on Vite >= 8.3 by sending updates in both path formats  -  by @​antfubot in #​5347 (993e2)

    View changes on GitHub

v66.10.3

Compare Source

   🐞 Bug Fixes

• rule-utils: Keep -1 out of the tagged pseudo variant sort  -  by @​giaBaoJS in #​5339 (23b90)

   🏎 Performance

• inspector: Trim the install footprint  -  by @​antfubot in #​5342 (e6387)

    View changes on GitHub

firebase/firebase-functions (firebase-functions)

v7.4.0

Compare Source

• Promoted 2nd gen Firebase Authentication triggers (onUserCreated and onUserDeleted) to general availability. (#​1959)
• Restore backwards compatibility for declared parameters when mixing SDK versions in nested dependencies (#​1957)
• Unify global manifest on globalThis for forward-compatible manifest extraction across duplicate module installations (#​1955)
• Refactor WebhookOptions, Gemini, and Vertex AI provider types in v2/ai (#​1952)
• remove unused fields from FAL functions (#​1952)
• fix(v2): re-export the express Response type from firebase-functions/v2/https (#​1798)
• Fix malformed annotations and add missing JSDoc comments for AI provider reference docs (#​1950)
• Exported ai provider from firebase-functions/v2 and fixed reference doc generation. (#​1949)
• Fixed an issue where firebase-functions/logger/compat added synthetic Error stack traces to string console.error calls and Node.js runtime warnings. (#​1948)
• fix(firestore): fallback to valid resource path in createSnapshotFromJson (#​1922)

vercel/turborepo (turbo)

v2.11.0: Turborepo v2.11.0

Compare Source

What's Changed

Changelog

• release(turborepo): 2.10.0 by @​github-actions[bot] in #​13131
• docs: Add Turborepo 2.10 release post and update docs by @​anthonyshew in #​13096
• perf: Avoid normalizing git index path joins by @​anthonyshew in #​12944
• chore: Remove tbx package by @​anthonyshew in #​13133
• feat: Migrate TUI virtual terminals from vt100 to Ghostty by @​anthonyshew in #​13135
• chore: Add examples maintenance agent by @​anthonyshew in #​13136
• chore: Remove a few pre-push hooks by @​anthonyshew in #​13137
• ci: Making sure Zig works in releases by @​anthonyshew in #​13138
• release(turborepo): 2.10.1-canary.1 by @​github-actions[bot] in #​13139
• fix: Support Corepack packageManager integrity hashes by @​gwagjiug in #​13123
• fix(env): Add XDG_DATA_* to pass-through by @​vercel[bot] in #​13145
• release(turborepo): 2.10.1-canary.2 by @​github-actions[bot] in #​13147
• feat: Support devEngines.packageManager by @​lachieh in #​12388
• feat: Support devEngines packageManager in workspaces by @​anthonyshew in #​13150
• release(turborepo): 2.10.1-canary.3 by @​github-actions[bot] in #​13149
• feat: Update add package manager codemod by @​anthonyshew in #​13151
• feat: Update workspace package manager declarations by @​anthonyshew in #​13154
• release(turborepo): 2.10.1 by @​github-actions[bot] in #​13156
• docs: Prefer devEngines packageManager by @​anthonyshew in #​13155
• fix: Install Zig for LSP builds by @​anthonyshew in #​13158
• ci: Pin macOS Rust builds to macOS 15 by @​anthonyshew in #​13167
• feat: Recognize nub as a package manager by @​colinhacks in #​13120
• fix: Preserve 3-level nested Bun lockfile entries during prune by @​anthonyshew in #​13168
• fix: Avoid following nested symlinked cache outputs by @​anthonyshew in #​13166
• feat: Add nub package manager support to JavaScript packages by @​anthonyshew in #​13169
• fix: Link ghostty-vt statically on Windows MSVC by @​anthonyshew in #​13171
• release(turborepo): 2.10.2-canary.1 by @​github-actions[bot] in #​13172
• feat: Add nub to create-turbo options by @​anthonyshew in #​13173
• release(turborepo): 2.10.2 by @​github-actions[bot] in #​13174
• release(turborepo): 2.10.3-canary.1 by @​github-actions[bot] in #​13176
• fix: Normalize package manager versions by @​anthonyshew in #​13177
• fix: Use singular workspace in package resolution error by @​anthonyshew in #​13178
• fix: Support nub native lockfiles by @​anthonyshew in #​13179
• perf(build): Enable thin LTO + codegen-units=1 for release builds by @​lukesandberg in #​13160
• release(turborepo): 2.10.3-canary.2 by @​github-actions[bot] in #​13181
• feat: Add aube package manager support by @​anthonyshew in #​13183
• release(turborepo): 2.10.3-canary.3 by @​github-actions[bot] in #​13184
• fix: Normalize package manager version output by @​anthonyshew in #​13185
• release(turborepo): 2.10.3-canary.4 by @​github-actions[bot] in #​13186
• refactor: Richer internal dependency data by @​anthonyshew in #​13188
• fix(repository): honor semver ranges in devEngines.packageManager.version by @​colinhacks in #​13189
• fix: Skip node_modules in boundaries checks by @​anthonyshew in #​13191
• fix: Add token exchange recovery guidance by @​anthonyshew in #​13192
• feat: Add --production flag to turbo prune by @​anthonyshew in #​13190
• release(turborepo): 2.10.3-canary.5 by @​github-actions[bot] in #​13193
• feat: Accept Bun lockfile version 2 by @​tsushanth in #​13119
• fix: Handle task executor join errors as internal errors by @​gwagjiug in #​13148
• fix: Tweaks for nub support by @​colinhacks in #​13187
• release(turborepo): 2.10.3-canary.6 by @​github-actions[bot] in #​13194
• release(turborepo): 2.10.3-canary.7 by @​github-actions[bot] in #​13195
• chore: Upgrade TypeScript to 7.0.1-rc by @​anthonyshew in #​13144
• docs: Add filtered installs to Vercel guide by @​anthonyshew in #​13196
• examples: add with-mcp-servers by @​Nishant-Chaudhary5338 in #​12997
• fix: Report malformed JSON parse errors instead of panicking by @​anthonyshew in #​13198
• fix: Improve error messaging when platform binary is missing by @​anthonyshew in #​13199
• release(turborepo): 2.10.3-canary.8 by @​github-actions[bot] in #​13200
• fix(watch): Recover from slow initial hash instead of timing out by @​lukesandberg in #​13159
• chore: Update vitest example to vitest 4 and use native test merging by @​abhiaagarwal in #​13202
• feat: Toggle between the TUI and streamed logs by @​anthonyshew in #​13203
• fix: Resolve Bun scoped package deps that share a name with a dependency by @​anthonyshew in #​13207
• feat: Select tasks by clicking rows in the TUI task list by @​anthonyshew in #​13206
• perf: Avoid deep-cloning dependency maps in lockfile closure cache by @​anthonyshew in #​13209
• perf: Cache root internal dependencies in package graph by @​anthonyshew in #​13211
• feat: Automatically copy TUI selection to clipboard on mouse release by @​anthonyshew in #​13208
• perf: Cache env wildcard matches across tasks during hashing by @​anthonyshew in #​13210
• perf: Replace per-package graph traversals in scope filtering by @​anthonyshew in #​13212
• perf: Derive dirty hash from repo index by @​anthonyshew in #​13213
• fix: Include untracked symlinks in repo-index dirty hash by @​anthonyshew in #​13218
• refactor: Use upstream libghostty-vt crates instead of vendored bindings by @​anthonyshew in #​13205
• fix: Remove devtools feature flag by @​anthonyshew in #​13219
• fix: Harden TUI terminal restore during shutdown by @​anthonyshew in #​13220
• fix: Correct gitignore precedence in untracked walk and memoize matcher chains by @​anthonyshew in #​13221
• release(turborepo): 2.10.3 by @​github-actions[bot] in #​13222
• ci: Retry Windows nextest aborts from transient 0xc0000142 spawn failures by @​anthonyshew in #​13240
• perf: Use mimalloc as the global allocator by @​anthonyshew in #​13237
• perf: Parse yarn v1 lockfiles in a single pass by @​anthonyshew in #​13241
• ci: Fix cache outputs for Eve app by @​anthonyshew in #​13243
• perf: Stop materializing spans for the disabled daemon log layer by @​anthonyshew in #​13244
• fix: Keep ancestor-scoped bun dependencies resolvable after prune renames by @​anthonyshew in #​13236
• perf: Overlap external dependency hashing with package file hashing by @​anthonyshew in #​13234
• perf: Build tracked repo index concurrently with package graph by @​anthonyshew in #​13232
• perf: Release tokio runtime at exit so background DNS lookups never stall the user by @​anthonyshew in #​13231
• perf: Overhaul pnpm lockfile parsing and dependency closure computation by @​anthonyshew in #​13228
• feat: Add futureFlags.experimentalCargoWorkspaces flag (no-op) by @​anthonyshew in #​13227
• feat: Introduce toolchain provider abstraction by @​anthonyshew in #​13235
• perf: Parse Berry lockfiles in a single pass by @​anthonyshew in #​13242
• fix: Apply input exclusion globs to the filesystem walk by @​anthonyshew in #​13224
• fix: Stop root-directory packages from claiming every file in change mapping by @​anthonyshew in #​13225
• chore: Rename turborepo-repository napi package to @​turbo/repository by @​anthonyshew in #​13226
• perf: Hash git blobs with hardware-accelerated SHA-1 by @​anthonyshew in #​13245
• release(turborepo): 2.10.4-canary.1 by @​github-actions[bot] in #​13247
• feat: Discover Cargo crates as packages by @​anthonyshew in #​13248
• perf: Reuse per-package external dependency hashes in run summaries by @​anthonyshew in #​13249
• perf: Stat workspace turbo.json files concurrently during discovery by @​anthonyshew in #​13251
• chore: Add tracing spans to workspace discovery and globwalk phases by @​anthonyshew in #​13252
• fix: Avoid non-reentrant libc calls in concurrent shutdown process scans by @​anthonyshew in #​13256
• perf: Memoize resolved task definitions during engine construction by @​anthonyshew in #​13257
• perf: Compute transitive closures and external dependency hashes concurrently with run setup by @​anthonyshew in #​13250
• perf: Probe microfrontends configs in parallel by @​anthonyshew in #​13262
• feat: Execute Cargo crate tasks via cargo by @​anthonyshew in #​13261
• perf: Pre-size engine task collections by @​anthonyshew in #​13265
• feat: Expose resolved experimentalCI task configuration in turbo query by @​anthonyshew in #​13264
• feat: Derive input and output globs for Cargo tasks by @​anthonyshew in #​13263
• perf: Parse large pnpm lockfile sections in parallel by @​anthonyshew in #​13266
• feat: Hash Cargo external dependencies per-crate by @​anthonyshew in #​13267
• ci: Install pnpm 10 in musl containers for Library Release by @​anthonyshew in #​13269
• ci: Force pnpm overwrite in Library Release musl containers by @​anthonyshew in #​13270
• perf: Defer the untracked-scan barrier to first file-hash use by @​anthonyshew in #​13268
• ci: Fetch API-created commit before updating local ref by @​anthonyshew in #​13271
• release(library): 0.0.1-canary.22 by @​github-actions[bot] in #​13272
• perf: Remove lock and dispatch overhead from task hash precomputation by @​anthonyshew in #​13273
• fix: Fall back to lockfile detection in @​turbo/repository when package manager is undeclared by @​anthonyshew in #​13275
• test: Add end-to-end coverage for Cargo workspaces by @​anthonyshew in #​13274
• release(library): 0.0.1-canary.23 by @​github-actions[bot] in #​13276
• release(turborepo): 2.10.4-canary.2 by @​github-actions[bot] in #​13278
• fix: Collapse nested package-manager fallback conditional by @​anthonyshew in #​13279
• feat: Make turbo watch Cargo-aware by @​anthonyshew in #​13280
• perf: Skip dependency-closure assembly for toolchains that derive nothing by @​anthonyshew in #​13277
• feat: Make turbo prune Cargo-aware by @​anthonyshew in #​13281
• fix: Raise the open-file soft limit at startup by @​anthonyshew in #​13282
• fix: Stop flagging relative imports that resolve into node_modules in boundaries by @​anthonyshew in #​13284
• perf: Evaluate simple include globs without wax compilation by @​anthonyshew in #​13285
• chore: Dogfood native Cargo support in this repository by @​anthonyshew in #​13283
• release(turborepo): 2.10.4 by @​github-actions[bot] in #​13286
• ci: Remove dead sccache configuration by @​anthonyshew in #​13289
• feat: Serve the Remote Cache as an sccache backend for Cargo tasks by @​anthonyshew in #​13288
• fix: Reject output path traversal by @​anthonyshew in #​13290
• fix: Disable the sccache proxy when remote cache use is off by @​anthonyshew in #​13291
• feat: Embed sccache so the Cargo compile cache needs no installation by @​anthonyshew in #​13293
• release(turborepo): 2.10.5-canary.1 by @​github-actions[bot] in #​13294
• fix: Pin a flag-aware turbo canary for the eve-agent deployment by @​anthonyshew in #​13295
• fix: Make the sccache compile cache actually cache by @​anthonyshew in #​13296
• release(turborepo): 2.10.5-canary.2 by @​github-actions[bot] in #​13297
• fix: Stop ambient CARGO_INCREMENTAL from suppressing compile cache injection by @​anthonyshew in #​13298
• fix: Never let compile cache storage failures fail the build by @​anthonyshew in #​13299
• test: Add outputs path-traversal negative-case regression tests by @​dnukumamras in #​13300
• release(turborepo): 2.10.5-canary.3 by @​github-actions[bot] in #​13302
• ci: Authenticate to Remote Cache via OIDC token exchange by @​anthonyshew in #​13303
• fix: Keep pnpm patches with version range keys during prune by @​anthonyshew in #​13307
• test: Scrub ambient turbo configuration from integration test children by @​anthonyshew in #​13306
• fix: Show toolchain tasks in the TUI and never run in silence by @​anthonyshew in #​13308
• ci: Fix change detection on push events by @​anthonyshew in #​13304
• refactor: Rename the Cargo toolchain id to rust by @​anthonyshew in #​13311
• fix: Remove extraneous bun.lock entries during prune by @​anthonyshew in #​13317
• feat: Require a user-declared name for the Cargo workspace package by @​anthonyshew in #​13312
• feat: Parse and validate the task command field by @​anthonyshew in #​13313
• chore: Harden turbo-vsc to invoke turbo without a shell by @​dnukumamras in #​13319
• feat: Resolve and execute task command overrides by @​anthonyshew in #​13315
• release(turborepo): 2.10.5-canary.4 by @​github-actions[bot] in #​13325
• feat: Run the Rust workspace tests through nextest via command override by @​anthonyshew in #​13316
• feat: Engage the Remote Cache and sccache compile cache for Rust CI by @​anthonyshew in #​13292
• ci: Pin GitHub Actions to full commit SHAs by @​XananasX7 in #​13143
• fix: Make npm prune rehoisting deterministic and complete by @​anthonyshew in #​13323
• feat: Report incremental cache reuse in the run summary by @​anthonyshew in #​13327
• chore: Remove planning docs by @​anthonyshew in #​13329
• docs: Migrate docs site to @​vercel/geistdocs package by @​molebox in #​13320
• ci: Update Remote Cache action by @​anthonyshew in #​13330
• release(turborepo): 2.10.5-canary.5 by @​github-actions[bot] in #​13331
• ci: Remove path-based workflow scheduling by @​anthonyshew in #​13332
• fix: Resolve EADDRINUSE in kitchen-sink api dev script by @​ashusnapx in #​13328
• ci: Disable telemetry messages in workflows by @​anthonyshew in #​13334
• fix: Prevent Cargo run tasks from being cached by @​anthonyshew in #​13335
• fix: Isolate Cargo cache by host platform by @​anthonyshew in #​13337
• fix: Continue TUI text selection beyond viewport by @​anthonyshew in #​13338
• ci: Dogfood Cargo target restoration by @​anthonyshew in #​13336
• fix: Require current Cargo lockfiles for caching by @​anthonyshew in #​13339
• fix: Reject unsupported Cargo local packages by @​anthonyshew in #​13340
• fix: Allow outputs outside package roots by @​anthonyshew in #​13342
• fix: Resolve Cargo lock dependencies by source by @​anthonyshew in #​13343
• docs: Update Cargo workspace support by @​anthonyshew in #​13349
• fix: Build Ghostty for baseline CPUs by @​anthonyshew in #​13352
• fix: Preserve watch rerun semantics for task inputs by @​anthonyshew in #​13351
• fix: Isolate Command Overrides From Toolchain Cache I/O by @​anthonyshew in #​13354
• release(turborepo): 2.10.5-canary.6 by @​github-actions[bot] in #​13355
• fix: Include patched Ghostty crate in Cargo workspace by @​anthonyshew in #​13357
• ci: Shard Rust tests across runners by @​anthonyshew in #​13356
• fix: Hash Cargo build environment inputs by @​anthonyshew in #​13348
• fix: Synchronize Cargo prune Docker lockfile by @​anthonyshew in #​13350
• chore: Update agents app Eve dependency by @​anthonyshew in #​13364
• fix: Preserve Yarn package extension ranges when pruning by @​anthonyshew in #​13363
• refactor: Add Toolchain output availability by @​anthonyshew in #​13360
• release(turborepo): 2.10.5 by @​github-actions[bot] in #​13368
• fix: Disable unresolved Cargo artifact caching by @​anthonyshew in #​13362
• fix: Surface create-turbo Git failures by @​anthonyshew in #​13371
• fix: Resolve exact cargo profile outputs by @​anthonyshew in #​13366
• fix: Prune Bun production workspace dev dependencies by @​anthonyshew in #​13369
• fix: Resolve Cargo target output layouts by @​anthonyshew in #​13370
• release(turborepo): 2.10.6-canary.1 by @​github-actions[bot] in #​13374
• fix: Preserve Yarn Babel extension during pruning by @​anthonyshew in #​13373
• feat: Support Cargo-only repos by @​anthonyshew in #​13378
• fix: Preserve colors in TUI output by @​anthonyshew in #​13381
• feat: Infer Cargo workspace tasks by @​anthonyshew in #​13380
• fix: Retain shutdown signals for force exit by @​anthonyshew in #​13382
• release(turborepo): 2.10.6-canary.2 by @​github-actions[bot] in #​13383
• fix: Resolve weekly security audit vulnerabilities by @​cursor[bot] in #​13358
• chore: Update to Rust 1.97.0 by @​ognevny in #​13322
• fix: Pin VS Code extension macOS runners by @​anthonyshew in #​13391
• release(turborepo): 2.10.6-canary.3 by @​github-actions[bot] in #​13392
• docs: Add Experimental Rust Guide by @​anthonyshew in #​13375
• ci: Use affected filtering for JS tests by @​anthonyshew in #​13386
• ci: Fold docs checks into quality by @​anthonyshew in #​13385
• ci: Verify schemas through Turborepo by @​anthonyshew in #​13387
• chore: Avoid duplicate N-API Cargo build by @​anthonyshew in #​13388
• chore: Hash embedded frameworks data in Rust builds by @​anthonyshew in #​13389
• ci: Include VS Code extension type checks by @​anthonyshew in #​13390
• refactor: Run releaser bundle directly by @​anthonyshew in #​13393
• refactor: Move release publishing into releaser by @​anthonyshew in #​13394
• refactor: Consolidate release orchestration by @​anthonyshew in #​13395
• feat: Add crate-scoped Cargo verification tasks by @​anthonyshew in #​13398
• ci: Fetch release commit parent by @​anthonyshew in #​13400
• docs: Update Geistdocs to 1.13.0 by @​molebox in #​13412
• release(turborepo): 2.10.6-canary.4 by @​github-actions[bot] in #​13401
• fix: Preserve pnpm node@runtime: lockfile entries by @​anthonyshew in #​13408
• chore: Fix typos in with-solid example and globwatch comment by @​tajo in #​13416
• refactor: Remove unused public APIs found by Hawk by @​anthonyshew in #​13420
• fix: Check dynamic imports in boundaries by @​anthonyshew in #​13418
• refactor: Use regex! for static pattern compilation by @​anthonyshew in #​13419
• fix: Refactor turbo watch by @​anthonyshew in #​13423
• release(turborepo): 2.10.6-canary.5 by @​github-actions[bot] in #​13424
• chore: Upgrade brace-expansion by @​anthonyshew in #​13429
• chore: Update tar to 7.5.18 by @​anthonyshew in #​13428
• chore: Upgrade js-yaml by @​anthonyshew in #​13427
• fix: Match JIT inputs for affected tasks by @​anthonyshew in #​13426
• fix: Preserve project Yarn package extensions by @​anthonyshew in #​13425
• release(turborepo): 2.10.6 by @​github-actions[bot] in #​13431
• chore: Refine bug report template help section by @​anthonyshew in #​13433
• fix: Verify version after attempting codemod upgrade by @​anthonyshew in #​13446
• test: Characterize JavaScript package discovery by @​anthonyshew in #​13440
• refactor: Separate package graph node assembly by @​anthonyshew in #​13441
• fix: Upgrade @​vercel/connect by @​anthonyshew in #​13450
• refactor: Add authoritative package knowledge by @​anthonyshew in #​13442
• feat: Select runnable task entrypoints by @​anthonyshew in #​13452
• refactor: Add workspace root contribution contract by @​anthonyshew in #​13447
• refactor: Use package knowledge for scope selection by @​anthonyshew in #​13443
• fix: Prevent mobile homepage overflow by @​anthonyshew in #​13453
• docs: Document service readiness probes by @​anthonyshew in #​13472
• fix: Preserve pnpm root dependencies during prune by @​anthonyshew in #​13476
• fix: Preserve pnpm aliased dependencies during prune by @​anthonyshew in #​13477
• release(turborepo): 2.10.7-canary.1 by @​github-actions[bot] in #​13478
• test: Add Terminal UI sanity tests by @​anthonyshew in #​13475
• chore: Upgrade Next.js by @​anthonyshew in #​13482
• chore: Upgrade brace-expansion by @​anthonyshew in #​13483
• fix: Support multiple macOS file watch roots by @​anthonyshew in #​13484
• fix: Scroll TUI task list with mouse wheel by @​anthonyshew in #​13479
• fix: Make releases resumable by @​anthonyshew in #​13486
• refactor: Expose knowledge-backed package scope views by @​anthonyshew in #​13456
• chore: Release Turborepo 2.10.7 by @​anthonyshew in #​13489
• refactor: Use package knowledge for configuration scopes by @​anthonyshew in #​13457
• refactor: Use package knowledge for run scope enumeration by @​anthonyshew in #​13458
• release(turborepo): 2.10.8-canary.1 by @​github-actions[bot] in #​13490
• refactor: Use package knowledge in repository views by @​anthonyshew in #​13459
• refactor: Use package knowledge in package integrations by @​anthonyshew in #​13460
• ci: Parallelize environment setup steps by [@​anthonyshew](https://redirect.github.com/anthonyshew

❗ Important

✂ PR body was truncated to here.

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • Between 12:00 AM and 03:59 AM, only on Monday (* 0-3 * * 1)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.