fix(deps): update all non-major dependencies

[renovate]

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Age	Confidence
@commitlint/cli (source)	^20.4.4 → ^20.5.0
@commitlint/config-conventional (source)	^20.4.4 → ^20.5.0
@favware/cliff-jumper	^6.0.0 → ^6.1.0
@types/node (source)	^24.12.0 → ^24.12.2
@vitest/coverage-v8 (source)	^4.1.0 → ^4.1.5
bullmq (source)	5.71.0 → 5.76.1
discord.js (source)	^14.25.1 → ^14.26.3
i18next (source)	^25.8.18 → ^25.10.10
prettier (source)	^3.8.1 → ^3.8.3
tldts	^7.0.25 → ^7.0.28
turbo (source)	^2.8.17 → ^2.9.6
undici (source)	^7.24.3 → ^7.25.0
vitest (source)	^4.1.0 → ^4.1.5
yarn (source)	4.12.0 → 4.14.1

---

Release Notes

conventional-changelog/commitlint (@​commitlint/cli)

v20.5.0

Compare Source

Bug Fixes

• cli: validate that --cwd directory exists before execution (#​4658) (cf80f75), closes #​4595

20.4.4 (2026-03-12)

Note: Version bump only for package @​commitlint/cli

20.4.3 (2026-03-03)

Bug Fixes

• footer parser does not escape special chars for regex #​4560 (#​4634) (8ff7c7f)

20.4.2 (2026-02-19)

Note: Version bump only for package @​commitlint/cli

20.4.1 (2026-02-02)

Note: Version bump only for package @​commitlint/cli

conventional-changelog/commitlint (@​commitlint/config-conventional)

v20.5.0

Compare Source

Note: Version bump only for package @​commitlint/config-conventional

20.4.4 (2026-03-12)

Note: Version bump only for package @​commitlint/config-conventional

20.4.3 (2026-03-03)

Bug Fixes

• footer parser does not escape special chars for regex #​4560 (#​4634) (8ff7c7f)

20.4.2 (2026-02-19)

Note: Version bump only for package @​commitlint/config-conventional

20.4.1 (2026-02-02)

Note: Version bump only for package @​commitlint/config-conventional

favware/cliff-jumper (@​favware/cliff-jumper)

v6.1.0

Compare Source

🐛 Bug Fixes

• deps: Update dependency smol-toml to ^1.6.1 (bc7a346) (#​303)
• deps: Update all non-major dependencies (dfce8f5) (#​296)
• deps: Update all non-major dependencies (d859ac9) (#​293)
• deps: Update all non-major dependencies (eaac1d2) (#​292)
• deps: Update all non-major dependencies (c929553) (#​291)
• deps: Update dependency smol-toml to ^1.6.0 (f9e7661) (#​287)
• deps: Update dependency git-cliff to ^2.11.0 (d7fa532) (#​286)
• deps: Update all non-major dependencies (236dc82) (#​283)
• deps: Update all non-major dependencies (e595c59) (#​280)
• deps: Update all non-major dependencies (fb55e53) (#​277)
• deps: Update all non-major dependencies (026d30a) (#​275)
• deps: Update all non-major dependencies (7f22325) (#​274)
• deps: Update all non-major dependencies (c216d79) (#​270)
• deps: Update all non-major dependencies (2ffd637) (#​269)
• deps: Update all non-major dependencies (5ad8486) (#​268)
• deps: Update all non-major dependencies (ad3837d) (#​260)
• deps: Update all non-major dependencies (b274e80) (#​259)
• deps: Update all non-major dependencies (b565a7b) (#​257)
• deps: Update all non-major dependencies (88192c5) (#​256)
• deps: Update all non-major dependencies (9ee2fe8) (#​255)
• deps: Update all non-major dependencies (31e2532) (#​251)
• deps: Update octokit monorepo (33182ae) (#​252)
• deps: Update dependency commander to v14 (fcab80c) (#​250)
• deps: Update all non-major dependencies (9ab2eb3) (#​249)
• deps: Update all non-major dependencies (fa29541) (#​247)
• deps: Update all non-major dependencies (91c8e32) (#​246)
• deps: Update all non-major dependencies (f483841) (#​242)
• deps: Update dependency conventional-recommended-bump to v11 (5958382) (#​238)
• deps: Update all non-major dependencies (be692db) (#​236)
• deps: Update all non-major dependencies (60d8186) (#​232)
• deps: Update all non-major dependencies (fbc3065) (#​231)
• deps: Update all non-major dependencies (7330784) (#​230)
• deps: Update dependency @​octokit/plugin-retry to ^7.1.3 (c582989) (#​227)

🚀 Features

• Add github-base-url option to publish to GHES and GHEC (51cbf49)

vitest-dev/vitest (@​vitest/coverage-v8)

v4.1.5

Compare Source

   🚀 Experimental Features

• coverage: Istanbul to support instrumenter option  -  by @​BartWaardenburg and @​AriPerkkio in #​10119 (0e0ff)

   🐞 Bug Fixes

• --project negation excludes browser instances  -  by @​felamaslen in #​10131 (9423d)
• Project color label on html reporter  -  by @​hi-ogawa in #​10142 (596f7)
• Fix vi.defineHelper called as object method  -  by @​hi-ogawa in #​10163 (122c2)
• Alias agent reporter to minimal  -  by @​sheremet-va in #​10157 (663b9)
• Respect diff config options in soft assertions  -  by @​Copilot, sheremet-va and @​sheremet-va in #​8696 (9787d)
• Respect diff config options in soft assertions "  -  by @​sheremet-va in #​8696 (7dc6d)
• ast-collect: Recognize _vi_import prefix in static test discovery  -  by @​Yejneshwar in #​10129 (32546)
• coverage: Descriptive error message when reports directory is removed during test run  -  by @​DaveT1991 and @​AriPerkkio in #​10117 (14133)
• snapshot: Increase default snapshot max output length  -  by @​hi-ogawa and Codex in #​10150 (21e66)
• ui: Fix jsx/tsx syntax highlight  -  by @​hi-ogawa in #​10152 (f1b1f)
• web-worker: Support MessagePort objects referenced inside postMessage data  -  by @​whitphx and Claude Opus 4.6 (1M context) in #​9927 and #​10124 (7ad7d)
• api: Make test-specification options writable  -  by @​sheremet-va in #​10154 (6abd5)

    View changes on GitHub

v4.1.4

Compare Source

   🚀 Features

• coverage:
  • Default to text reporter skipFull if agent detected  -  by @​hi-ogawa in #​10018 (53757)
• experimental:
  • Expose assertion as a public field  -  by @​sheremet-va in #​10095 (a120e)
  • Support aria snapshot  -  by @​hi-ogawa, Claude Opus 4.6 (1M context), @​AriPerkkio, Codex and @​sheremet-va in #​9668 (d4fbb)
• reporter:
  • Add filterMeta option to json reporter  -  by @​nami8824 and @​sheremet-va in #​10078 (b77de)

   🐞 Bug Fixes

• Use "black" foreground for labeled terminal message to ensure contrast  -  by @​hi-ogawa in #​10076 (203f0)
• Make expect(..., message) consistent as error message prefix  -  by @​hi-ogawa and Codex in #​10068 (a1b5f)
• Do not hoist imports whose names match class properties .  -  by @​SunsetFi in #​10093 and #​10094 (0fc4b)
• browser: Spread user server options into browser Vite server in project  -  by @​GoldStrikeArch in #​10049 (65c9d)

    View changes on GitHub

v4.1.3

Compare Source

   🚀 Experimental Features

• Add experimental.preParse flag  -  by @​sheremet-va in #​10070 (78273)
• Support browser.locators.exact option  -  by @​sheremet-va in #​10013 (48799)
• Add TestAttachment.bodyEncoding  -  by @​hi-ogawa in #​9969 (89ca0)
• Support custom snapshot matcher  -  by @​hi-ogawa, Claude Sonnet 4.6 and Codex in #​9973 (59b0e)

   🐞 Bug Fixes

• Advance fake timers with expect.poll interval  -  by @​hi-ogawa and Claude Sonnet 4.6 in #​10022 (3f5bf)
• Add @vitest/coverage-v8 and @vitest/coverage-istanbul as optional dependency  -  by @​alan-agius4 in #​10025 (146d4)
• Fix defineHelper for webkit async stack trace + update playwright 1.59.0  -  by @​hi-ogawa in #​10036 (5a5fa)
• Fix suite hook throwing errors for unused auto test-scoped fixture  -  by @​hi-ogawa and Claude Sonnet 4.6 in #​10035 (39865)
• expect:
  • Remove JestExtendError.context from verbose error reporting  -  by @​hi-ogawa in #​9983 (66751)
  • Don't leak "runner" types  -  by @​sheremet-va in #​10004 (ec204)
• snapshot:
  • Fix flagging obsolete snapshots for snapshot properties mismatch  -  by @​hi-ogawa and Claude Sonnet 4.6 in #​9986 (6b869)
  • Export custom snapshot matcher helper from vitest  -  by @​hi-ogawa and Codex in #​10042 (691d3)
• ui:
  • Don't leak vite types  -  by @​sheremet-va in #​10005 (fdff1)
• vm:
  • Fix external module resolve error with deps optimizer query  -  by @​hi-ogawa and Claude Sonnet 4.6 in #​10024 (9dbf4)

    View changes on GitHub

v4.1.2

Compare Source

This release bumps Vitest's flatted version and removes version pinning to resolve flatted's CVE related issues (#​9975).

   🐞 Bug Fixes

• Don't resolve setupFiles from parent directory  -  by @​hi-ogawa in #​9960 (7aa93)
• Ensure sequential mock/unmock resolution  -  by @​hi-ogawa and Claude Opus 4.6 in #​9830 (7c065)
• browser: Take failure screenshot if toMatchScreenshot can't capture a stable screenshot  -  by @​macarie in #​9847 (faace)
• coverage: Correct coverageConfigDefaults values and types  -  by @​Arthie in #​9940 (b3c99)
• pretty-format: Fix output limit over counting  -  by @​hi-ogawa in #​9965 (d3b7a)
• Disable colors if agent is detected  -  by @​sheremet-va and @​AriPerkkio in #​9851 (6f97b)

    View changes on GitHub

v4.1.1

Compare Source

   🚀 Features

• experimental:
  • Expose matchesTagsFilter to test if the current filter matches tags  -  by @​sheremet-va in #​9913 (eec53)
  • Introduce experimental.vcsProvider  -  by @​sheremet-va in #​9928 (56115)

   🐞 Bug Fixes

• Mark TestProject.testFilesList internal properly  -  by @​sapphi-red in #​9867 (54f26)
• Detect fixture that returns without calling use  -  by @​oilater in #​9831 and #​9861 (633ae)
• Drop vite 8.beta support  -  by @​AriPerkkio in #​9862 (b78f5)
• Type regression in vi.mocked() static class methods  -  by @​purepear and @​hi-ogawa in #​9857 (90926)
• Properly re-evaluate actual modules of mocked external  -  by @​hi-ogawa in #​9898 (ae5ec)
• Preserve coverage report when html reporter overlaps  -  by @​hi-ogawa in #​9889 (2d81a)
• Provide vi.advanceTimers to the preview provider  -  by @​sheremet-va in #​9891 (1bc3e)
• Don't leak event listener in playwright provider  -  by @​sheremet-va in #​9910 (d9355)
• Open browser in --standalone mode without running tests  -  by @​sheremet-va in #​9911 (e78ad)
• Guard disposable and optional body  -  by @​sheremet-va in #​9912 (6fdb2)
• Resolve retry.condition RegExp serialization issue  -  by @​nstepien and @​hi-ogawa in #​9942 (7b605)
• collect:
  • Don't treat extra props on test return as tests  -  by @​sheremet-va in #​9871 (141e7)
• coverage:
  • Simplify provider types  -  by @​AriPerkkio in #​9931 (aaf9f)
  • Load built-in provider without module runner  -  by @​AriPerkkio in #​9939 (bf892)
• expect:
  • Soft assertions continue after .resolves/.rejects promise errors  -  by @​mixelburg, Maks Pikov, Claude Opus 4.6 (1M context) and @​hi-ogawa in #​9843 (6d74b)
  • Fix sinon-chai style API  -  by @​hi-ogawa in #​9943 (0f08d)
• pretty-format:
  • Limit output for large object  -  by @​hi-ogawa and Claude Opus 4.6 (1M context) in #​9949 (0d5f9)

    View changes on GitHub

taskforcesh/bullmq (bullmq)

v5.76.1

Compare Source

Bug Fixes

• worker: use scheduler registry to discriminate repeatable keys (#​4007) (ea7705d)

v5.76.0

Compare Source

v5.75.2

Compare Source

Bug Fixes

• handle ioredis Cluster connect status in waitUntilReady (#​2402) (#​4055) (422e2d5)

v5.75.1

Compare Source

v5.75.0

Compare Source

v5.74.2

Compare Source

v5.74.1

Compare Source

Bug Fixes

• sandbox: remove returnvalue from JobJsonSandbox interface (#​3950) (e9d0c2d)

v5.74.0

Compare Source

Features

• sandbox: add getDependencies proxy for sandboxed processors (#​3922) ref #​3533 (ec420d1)

v5.73.5

Compare Source

Bug Fixes

• worker: resume processing after pause with doNotWaitActive (#​3974) fixes #​3971 (8b8d464)

v5.73.4

Compare Source

Bug Fixes

• worker: emit active event as soon as getting next job (elixir) (python) (#​3936) ref #​3911 (d5eca5a)

v5.73.3

Compare Source

Performance Improvements

• delayed: allow to fetch next job when moving job to delayed (python) (elixir) (#​3870) (0cb0b8c)

v5.73.2

Compare Source

Bug Fixes

• flow: correctly propagate root jobId from pipeline results (#​3905) (242f264)

v5.73.1

Compare Source

Bug Fixes

• sandbox: add missing type declarations to SandboxedJob interface (#​3946) fixes #​3925 (4c6b2b2)

v5.73.0

Compare Source

Features

• sandbox: add getDependenciesCount proxy for jobs (#​3923) ref #​3533 (elixir) (php) (python) (cbfe437)

v5.72.1

Compare Source

Bug Fixes

• cancellation: use native AbortController implementation if found (#​3903) (46880af)

v5.72.0

Compare Source

Features

• deduplication: add keepLastIfActive option for at-least-once-after-active semantics (#​3902) (aa529bc)

v5.71.1

Compare Source

Bug Fixes

• deps: update dependency ioredis to v5.10.1 (#​3897) (60f645a)

discordjs/discord.js (discord.js)

v14.26.3

Compare Source

Bug Fixes

• TeamMember: Allow a default permissions (dced197)

v14.26.2

Compare Source

Bug Fixes

• Action: Don't add recipients to guild channels (#​11479) (b86573d)

v14.26.1

Compare Source

Bug Fixes

• Only return DMChannel that have the user as known recipient (#​11478) (67566d0)

v14.26.0

Compare Source

Bug Fixes

• Remove manage messages check for pinnable (#​11453) (1a0da18)
• DJSError: Differentiate error type (#​11295) (f5b3f84)

Features

• Allow partial DMChannel without client user (#​11462) (45bd430)
• Modal radio group and checkbox components for v14 (#​11437) (b42e499)

Refactor

• DJSError: Prefer this.constructor.name (#​11294) (e32f0c1)

Typings

• BroadcastEval overload order (#​11422) (16d70b9)

i18next/i18next (i18next)

v25.10.10

Compare Source

v25.10.9

Compare Source

v25.10.8

Compare Source

v25.10.7

Compare Source

v25.10.6

Compare Source

v25.10.5

Compare Source

• feat(types): selector functions as keyPrefix in getFixedT now provide full type-safe key narrowing — the returned t function is scoped to the prefix subtree 2367

v25.10.4

Compare Source

• feat(types): exists() is now a type guard that narrows the key to SelectorKey, so a validated key can be passed directly to t() 2364

v25.10.3

Compare Source

• check also for I18NEXT_NO_SUPPORT_NOTICE env variable

v25.10.2

Compare Source

• feat(types): keyFromSelector is now type-safe — the selector callback is constrained against your resource definitions, catching invalid keys at compile time. Supports optional ns and keyPrefix options for non-default namespace/prefix contexts 2364

v25.10.1

Compare Source

• fix(types): FilterKeys now correctly excludes base keys that have context variants when the provided context doesn't match any of them (e.g. key some with variant some_me is no longer accessible with context="one")

v25.10.0

Compare Source

• feat(types): keyFromSelector now returns a branded SelectorKey type that t() accepts directly, enabling pre-computed and reusable translation keys 2364
• feat: support selector syntax for keyPrefix in getFixedT and per-call options 2367
• feat(types): interpolation values are now automatically typed based on built-in format specifiers — {{val, number}} requires number, {{val, datetime}} requires Date, {{name}} requires string, etc. Custom formatters can be typed via interpolationFormatTypeMap in CustomTypeOptions 2378
• fix(types): FilterKeys in selector mode now preserves non-context, non-plural leaf keys when context is provided, fixing incorrect type narrowing when combining returnObjects: true with context 2398

v25.9.0

Compare Source

• feat(types): selector API now enforces { count: number } when a key resolves to plural forms 2373
• fix(types): string unions with invalid members are now correctly detected as type errors when used as context option 2172

v25.8.20

Compare Source

• • fix: getFixedT() selector now resolves namespaces against the effective ns rather than the global init options #​2406

v25.8.19

Compare Source

• fix: selector API namespace resolution regression for single-string ns and primary namespace in array #​2405. Reverts the broad namespace-prefix rewrite from v25.8.15 and replaces it with a targeted fix that only rewrites paths starting with a secondary namespace in a multi-namespace array, matching the type-level contract of GetSource

prettier/prettier (prettier)

v3.8.3

Compare Source

v3.8.2

Compare Source

remusao/tldts (tldts)

v7.0.28

Compare Source

📜 Update Public Suffix List

• tldts-experimental, tldts
  • Update upstream public suffix list #​2541 (@​remusao)

🔩 Dependencies

• Bump lodash from 4.17.23 to 4.18.1 #​2546 (@​dependabot[bot])
• Bump handlebars from 4.7.8 to 4.7.9 #​2542 (@​dependabot[bot])
• Bump picomatch from 2.3.1 to 2.3.2 #​2540 (@​dependabot[bot])
• Bump typescript-eslint from 8.57.2 to 8.58.0 #​2543 (@​dependabot[bot])
• Bump rollup from 4.60.0 to 4.60.1 #​2544 (@​dependabot[bot])
• Bump rollup from 4.59.0 to 4.60.0 #​2536 (@​dependabot[bot])
• Bump typescript-eslint from 8.57.1 to 8.57.2 #​2539 (@​dependabot[bot])

Authors: 2

• @​dependabot[bot]
• Rémi (@​remusao)

---

v7.0.27

Compare Source

📜 Update Public Suffix List

• tldts-experimental, tldts
  • Update upstream public suffix list #​2534 (@​remusao)

🔩 Dependencies

• Bump flatted from 3.3.1 to 3.4.2 #​2535 (@​dependabot[bot])
• Bump typescript-eslint from 8.57.0 to 8.57.1 #​2533 ([@​dependabot[b

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • "before 12pm on Sunday"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud