Skip to content

chore(deps-dev): bump the minor-and-patch group across 1 directory with 17 updates - #187

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/minor-and-patch-bf9caec837
Open

chore(deps-dev): bump the minor-and-patch group across 1 directory with 17 updates#187
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/minor-and-patch-bf9caec837

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 6, 2026

Copy link
Copy Markdown
Contributor

Bumps the minor-and-patch group with 17 updates in the / directory:

Package From To
@microsoft/api-extractor 7.59.4 7.60.1
rollup 4.65.1 4.67.4
astro 7.4.2 7.4.5
fake-indexeddb 6.2.6 6.2.7
fastify 5.12.7 5.12.8
@hapi/hapi 21.4.11 21.4.12
hono 4.13.14 4.13.16
@nestjs/common 12.3.1 12.3.2
@nestjs/core 12.3.1 12.3.2
@nestjs/platform-express 12.3.1 12.3.2
@nestjs/platform-fastify 12.3.1 12.3.2
nitropack 2.13.5 2.13.6
nuxt 4.6.2 4.6.4
preact 11.1.0 11.1.1
svelte 5.57.2 5.57.3
@sveltejs/kit 3.1.0 3.1.1
@sveltejs/adapter-node 6.0.0 6.0.1

Updates @microsoft/api-extractor from 7.59.4 to 7.60.1

Changelog

Sourced from @​microsoft/api-extractor's changelog.

7.60.1

Fri, 30 Oct 2026 21:34:20 GMT

Version update only

7.60.0

Tue, 27 Oct 2026 00:20:25 GMT

Minor changes

  • Upgrade the bundled compiler engine to TypeScript 6.0.3
Commits

Updates rollup from 4.65.1 to 4.67.4

Release notes

Sourced from rollup's releases.

v4.67.4

4.67.4

2026-11-01

Bug Fixes

  • Make rollup work again on older Xeon processors (#6622)

Pull Requests

v4.67.3

4.67.3

2026-10-31

Bug Fixes

  • Ensure line breaks in module ids are handled correctly in imports (#6620)

Pull Requests

v4.67.2

4.67.2

2026-10-30

Features

  • Support X64 Android (#6603)

Pull Requests

v4.66.0

4.66.0

... (truncated)

Changelog

Sourced from rollup's changelog.

4.67.4

2026-11-01

Bug Fixes

  • Make rollup work again on older Xeon processors (#6622)

Pull Requests

4.67.3

2026-10-31

Bug Fixes

  • Ensure line breaks in module ids are handled correctly in imports (#6620)

Pull Requests

4.67.2

2026-10-30

Features

  • Support X64 Android (#6603)

Pull Requests

4.66.0

2026-10-28

Features

... (truncated)

Commits

Updates astro from 7.4.2 to 7.4.5

Release notes

Sourced from astro's releases.

astro@7.4.5

Patch Changes

  • #18558 fac3c50 Thanks @​astro-factory! - Fixes astro dev status and other background server commands deleting the lock file of a running dev or preview server when run from a sandbox or as another user that is not permitted to signal its process

  • #18559 10dae2f Thanks @​astro-factory! - Fixes import.meta.env values containing $ sequences (such as $$ or $&) being corrupted in astro build when server code reads the import.meta.env object directly, for example with const { MY_SECRET } = import.meta.env

  • #18544 e3bec3d Thanks @​skezo! - Fixes request paths with invalid percent-encoding (e.g. /%C0%AF or a bare %) being logged as an Invalid URL encoding error and routed with the undecoded path. These requests now return a 400, the same as a path that is encoded too many times.

  • #18520 e023aba Thanks @​matthewp! - Makes rendering of string tag names stricter and consistent across .astro dynamic tags, JSX, and MDX. Only the leading part of the string that is a valid element name is rendered, so characters such as / or = can no longer change the generated markup. A string that does not start with a valid element name (for example '!--' or '') now throws an error instead of producing invalid HTML.

astro@7.4.4

Patch Changes

astro@7.4.4-beta.0

Patch Changes

astro@7.4.3

Patch Changes

  • #18488 e4e25fa Thanks @​umeraamir69! - CSP no longer hashes empty children on external stylesheets and scripts, which was inserting the SHA-256 of the empty string into script-src and style-src.

  • #18500 e5a3a1b Thanks @​astro-factory! - Fixes <Image> and <Picture> emitting duplicate srcset candidates when densities contains equivalent values such as 1 and '1x'

  • #18517 c3185b7 Thanks @​okxint! - Fix unhandled AbortError rejection when ClientRouter skips a pending view transition

  • #18497 c712113 Thanks @​astro-factory! - Fixes an uncaught TypeError in the browser when a server:defer island request fails due to a network error. The fallback content is kept, as it is for non-200 responses.

  • #18525 d0240b9 Thanks @​astro-factory! - Fixes a DEP0190 deprecation warning printed by astro info on Node.js 24 and later

  • #18522 776b9a6 Thanks @​astro-factory! - Fixes memoryCache() serving an empty body for cached pages that return an empty 404 or 500 response. These responses now render the 404 or 500 error page on every request.

  • #18511 d060ff9 Thanks @​astro-factory! - Fixes transition:name styles missing in dev when the element is inside a component that is only rendered through another component with no styles or scripts

  • #18494 5fe699c Thanks @​astro-factory! - Fixes the astro CLI refusing to run on StackBlitz by allowing Node.js >=22.22.0 inside WebContainers, whose Node.js version users cannot change

  • #18506 bf43a60 Thanks @​astro-factory! - Fixes <ClientRouter /> animating scroll restoration on back/forward navigation when scroll-behavior: smooth is set. Saved scroll positions are now restored instantly, matching the browser's native behavior.

  • #18476 8ea79a2 Thanks @​astro-factory! - Fixes a DataCloneError crash when building pages that render SVG imports with <Image /> or getImage() while experimental.parallelPrerender is enabled.

  • #18504 6dbd737 Thanks @​astro-factory! - Fixes <Picture> emitting a duplicate 1x candidate in <source> srcset when densities includes 1

  • #18524 7524889 Thanks @​astro-factory! - Fixes type errors reported in Astro's built-in <Image />, <Picture />, <Code />, <Debug /> and <ClientRouter /> components when type-checking a project that extends astro/tsconfigs/strictest with tsc and @astrojs/ts-content-mapper

  • #18493 3773941 Thanks @​astro-factory! - Fixes scoped styles of unused Astro components being included in the build when those components are re-exported from a barrel file

... (truncated)

Changelog

Sourced from astro's changelog.

7.4.5

Patch Changes

  • #18558 fac3c50 Thanks @​astro-factory! - Fixes astro dev status and other background server commands deleting the lock file of a running dev or preview server when run from a sandbox or as another user that is not permitted to signal its process

  • #18559 10dae2f Thanks @​astro-factory! - Fixes import.meta.env values containing $ sequences (such as $$ or $&) being corrupted in astro build when server code reads the import.meta.env object directly, for example with const { MY_SECRET } = import.meta.env

  • #18544 e3bec3d Thanks @​skezo! - Fixes request paths with invalid percent-encoding (e.g. /%C0%AF or a bare %) being logged as an Invalid URL encoding error and routed with the undecoded path. These requests now return a 400, the same as a path that is encoded too many times.

  • #18520 e023aba Thanks @​matthewp! - Makes rendering of string tag names stricter and consistent across .astro dynamic tags, JSX, and MDX. Only the leading part of the string that is a valid element name is rendered, so characters such as / or = can no longer change the generated markup. A string that does not start with a valid element name (for example '!--' or '') now throws an error instead of producing invalid HTML.

7.4.4

Patch Changes

7.4.3

Patch Changes

  • #18488 e4e25fa Thanks @​umeraamir69! - CSP no longer hashes empty children on external stylesheets and scripts, which was inserting the SHA-256 of the empty string into script-src and style-src.

  • #18500 e5a3a1b Thanks @​astro-factory! - Fixes <Image> and <Picture> emitting duplicate srcset candidates when densities contains equivalent values such as 1 and '1x'

  • #18517 c3185b7 Thanks @​okxint! - Fix unhandled AbortError rejection when ClientRouter skips a pending view transition

  • #18497 c712113 Thanks @​astro-factory! - Fixes an uncaught TypeError in the browser when a server:defer island request fails due to a network error. The fallback content is kept, as it is for non-200 responses.

  • #18525 d0240b9 Thanks @​astro-factory! - Fixes a DEP0190 deprecation warning printed by astro info on Node.js 24 and later

  • #18522 776b9a6 Thanks @​astro-factory! - Fixes memoryCache() serving an empty body for cached pages that return an empty 404 or 500 response. These responses now render the 404 or 500 error page on every request.

  • #18511 d060ff9 Thanks @​astro-factory! - Fixes transition:name styles missing in dev when the element is inside a component that is only rendered through another component with no styles or scripts

  • #18494 5fe699c Thanks @​astro-factory! - Fixes the astro CLI refusing to run on StackBlitz by allowing Node.js >=22.22.0 inside WebContainers, whose Node.js version users cannot change

  • #18506 bf43a60 Thanks @​astro-factory! - Fixes <ClientRouter /> animating scroll restoration on back/forward navigation when scroll-behavior: smooth is set. Saved scroll positions are now restored instantly, matching the browser's native behavior.

  • #18476 8ea79a2 Thanks @​astro-factory! - Fixes a DataCloneError crash when building pages that render SVG imports with <Image /> or getImage() while experimental.parallelPrerender is enabled.

  • #18504 6dbd737 Thanks @​astro-factory! - Fixes <Picture> emitting a duplicate 1x candidate in <source> srcset when densities includes 1

  • #18524 7524889 Thanks @​astro-factory! - Fixes type errors reported in Astro's built-in <Image />, <Picture />, <Code />, <Debug /> and <ClientRouter /> components when type-checking a project that extends astro/tsconfigs/strictest with tsc and @astrojs/ts-content-mapper

  • #18493 3773941 Thanks @​astro-factory! - Fixes scoped styles of unused Astro components being included in the build when those components are re-exported from a barrel file

  • #18512 1151b9e Thanks @​jp-knj! - Fixes CSP hashes added with Astro.csp from components rendered inside <body> being left out of the CSP <meta> element in static builds, including MDX pages

  • Updated dependencies [6cf3423, edfbf4a]:

... (truncated)

Commits
  • d354ffb [ci] release (#18547)
  • 10dae2f fix(env): preserve $ in import.meta.env values when the env object is inlin...
  • fac3c50 Preserve dev server lock file when process signal check returns EPERM (#18558)
  • e023aba Make string tag name rendering stricter and consistent (#18520)
  • e3bec3d Reject request paths with invalid percent-encoding with a 400 (#18544)
  • 883e672 [ci] release (#18540)
  • df838da astro add: configure tagged official adapters (#18344)
  • fda754d [ci] release (#18478)
  • 776b9a6 Prevent memory cache from storing empty 404/500 responses that would be rerou...
  • d060ff9 Fix transition:name styles silently dropped in dev when component is nested u...
  • Additional commits viewable in compare view

Updates fake-indexeddb from 6.2.6 to 6.2.7

Release notes

Sourced from fake-indexeddb's releases.

v6.2.7

  • Improve performance of put and delete for object stores with indexes (#172 by @​jameskfry)
Changelog

Sourced from fake-indexeddb's changelog.

6.2.7 (2026-10-29)

  • Improve performance of put and delete for object stores with indexes (#172 by @​jameskfry)
Commits
  • 09e7f76 6.2.7
  • e1b6b48 Changelog
  • f7cf6d8 Merge pull request #172 from jameskfry/perf/delete-index-records
  • 0f4e496 Keep the single-key index path allocation-free
  • f0f8bc0 Delete index records by index key instead of scanning the whole index
  • 8881007 Update for 6.2.6 because the version script didn't automatically run for me s...
  • See full diff in compare view

Updates fastify from 5.12.7 to 5.12.8

Release notes

Sourced from fastify's releases.

v5.12.8

⚠️ Security Release

What's Changed

Full Changelog: fastify/fastify@v5.12.7...v5.12.8

Commits
  • 0c7413a Bumped v5.12.8
  • 0ffe18f test: make handlerTimeout ended-but-not-finished test deterministic
  • 8e7c2b7 test: restore 100% coverage for handlerTimeout abort paths
  • 15fbadf [Backport 5.x] fix: abort streaming response when handlerTimeout fires after ...
  • 18a7049 docs: fix syntax errors in code examples (#7159)
  • c410867 docs: clarify that maxParamLength does not prevent ReDoS (#7140)
  • 0fa6bc2 [Backport 5.x] fix(decorators): evaluate instance getters once in getDecorato...
  • 0873d55 perf(request): hoist port regex to module level (#7110)
  • 25cd11e [Backport 5.x] docs: remove plugins that do not support Fastify v5 (#7152)
  • d60a57b [Backport 5.x] docs(reply): reorganize Reply reference by properties and meth...
  • Additional commits viewable in compare view

Updates @hapi/hapi from 21.4.11 to 21.4.12

Commits

Updates hono from 4.13.14 to 4.13.16

Release notes

Sourced from hono's releases.

v4.13.16

Security fixes

This release includes fixes for the following security issues:

mount() and app.mount() can forward a path that bypasses middleware scoped inside the mount prefix

Affects: mount() in hono/mount and app.mount(). A dynamic prefix such as /api/:tenant/* was removed by the length of the route pattern. The forwarded path was also re-normalized by the URL parser, so a decoded \ became / and .. collapsed. Both let a crafted request skip middleware scoped inside the mount prefix. Routes such as /assets* and duplicate parameter names now throw. GHSA-4m76-xfj5-7975

RegExpRouter skips wildcard middleware for certain route patterns and for paths with an encoded line terminator

Affects: RegExpRouter, including the default SmartRouter. Wildcard middleware was not applied in three cases: a parameter written as {[^/]+} in the middleware path only, a /prefix* route next to /prefix/* middleware, and a path with an encoded line terminator. RegExpRouter now covers the same routes as the other routers. Custom patterns that can match the empty string, such as {[0-9]*}, throw UnsupportedPathError. Regenerate PreparedRegExpRouter data. GHSA-h7mg-cq63-vhpq

validator('form') skips validation for multipart/form-data requests with extra parameters

Affects: validator('form') in hono/validator. A multipart/form-data request with an extra parameter such as charset was not recognized as a form. The validator then saw an empty object while the handler could read all fields. GHSA-4h7h-rv7c-7m2v

css helper does not escape a closing tag assembled from template parts and values, allowing HTML injection

Affects: css in hono/css. A </style> split between the template and a value, or between two values, was not escaped. Closing tags are now escaped after minification. GHSA-3gg2-335m-rxc6

csrf() does not check requests sent by hyperlink auditing (text/ping)

Affects: csrf() in hono/csrf. A POST sent by Chromium's <a ping> has the content type text/ping and was not checked against Origin and Sec-Fetch-Site. GHSA-46wx-v44x-9hh2

Users who rely on path-scoped middleware with mount(), wildcard middleware with the default router, validator('form'), the css helper with untrusted values, or csrf() are strongly encouraged to upgrade to this version.

What's Changed

  • fix(jwt): reject a signature segment outside the base64url alphabet and a header with crit in honojs/hono#5597

Full Changelog: honojs/hono@v4.13.15...v4.13.16

v4.13.15

What's Changed

Full Changelog: honojs/hono@v4.13.14...v4.13.15

Commits
  • c91b60a 4.13.16
  • e1dd588 fix(jwt): reject a signature segment outside the base64url alphabet and a hea...
  • bf16471 Merge commit from fork
  • d88fab3 Merge commit from fork
  • 34f9043 Merge commit from fork
  • 8a103aa Merge commit from fork
  • 15bbd96 Merge commit from fork
  • 3cb29de 4.13.15
  • 17ad0e2 fix(context): allow c.header() after the response body is consumed (#5587)
  • ee88684 docs(contributing): drop the note about linking a fork branch (#5593)
  • Additional commits viewable in compare view

Updates @nestjs/common from 12.3.1 to 12.3.2

Commits

Updates @nestjs/core from 12.3.1 to 12.3.2

Commits

Updates @nestjs/platform-express from 12.3.1 to 12.3.2

Commits

Updates @nestjs/platform-fastify from 12.3.1 to 12.3.2

Commits

Updates nitropack from 2.13.5 to 2.13.6

Release notes

Sourced from nitropack's releases.

v2.13.6

compare changes

🔒 Security

This release contains 3 security fixes and additional hardening for cache, proxy and redirect route rules. If you're on nitropack v2 (including Nuxt 3 and 4), please upgrade.

  • GHSA-39r7-wfcx-99xg: Cached event handlers might share entries across HTTP methods or replay per-user Set-Cookie headers
  • GHSA-rhhp-7488-3qwf: Proxy route rule scope bypass via empty // segment and prefix re-entry
  • GHSA-pqxc-r4h5-jc95: Open redirect via backslash and control characters in wildcard redirect route rules

🔥 Performance

  • externals: Memoize tryResolve per importer directory in node-externals (v2) (#4800)

🩹 Fixes

  • Add typeFrom support for autoimports exports generation (#3963)
  • cache: Only cache GET/HEAD and never store per-user responses (9c2691d9)
  • route-rules: Validate final proxy/redirect target scope (353eff5c)
  • route-rules: Prevent open redirect via backslash and control characters in wildcard redirects (f16a4fad)

Dependencies

  • Update archiver to v8 (#4936)

Preset Changes

  • vercel: Support node.js 26 (#4968)

❤️ Contributors

Commits
  • 0b354b5 chore(release): v2.13.6
  • b29e4e4 chore(deps): update non-major dependencies and lockfile
  • c28ce30 test(route-rules): cover %2F segment absorbing .. in scope checks
  • f16a4fa fix(route-rules): prevent open redirect via backslash and control characters ...
  • 353eff5 fix(route-rules): validate final proxy/redirect target scope
  • 9c2691d fix(cache): only cache GET/HEAD and never store per-user responses
  • a676074 presets(vercel): support node.js 26 (#4968)
  • 4086aa2 perf(externals): memoize tryResolve per importer directory in node-externals ...
  • 726bd77 fix: add typeFrom support for autoimports exports generation (#3963)
  • f0c4732 chore(deps): update archiver to v8 (#4936)
  • See full diff in compare view

Updates nuxt from 4.6.2 to 4.6.4

Release notes

Sourced from nuxt's releases.

v4.6.4

4.6.4 is a security release. It fixes eight advisories in Nuxt and pulls in nitropack 2.13.6, which fixes three more in Nitro. We recommend upgrading as soon as you can.

⚠️ Behaviour changes

These probably won't affect most apps, but it's worth flagging anyway:

  1. Error details in production. When a page fails to render on the server, the error page and the payload now only carry message and data of errors you create with createError. Everything else is stripped.
  2. Dev server Host checks. Webpack and rspack dev servers now reject requests with an unexpected Host header, as Vite already does. If you use a custom hostname or tunnel, you'll need to add it to the new devServer.allowedHosts option.
  3. workspaceDir detection. When workspaceDir isn't set, Nuxt now only widens it past rootDir to an explicit workspace root or the closest git repository.
  4. Nitropack cached routes. cache, swr and isr route rules now only cache GET and HEAD requests, and no longer store responses that set a cookie or send Cache-Control: private or no-store. Wildcard proxy and redirect rules also reject requests whose resolved target would leave the rule's scope.
  5. Route rules and encoded slashes. Route rules now match paths that contain encoded slashes, so /api%2Fadmin is covered by a /api/** rule.

👉 Changelog

compare changes

🩹 Fixes

  • nitro,nuxt: require unrouting 0.3.2 (768d21368)
  • nitro: preserve wildcard tails in case-insensitive route rules (bf31e4cd8)
  • nitro: require nitropack 2.13.6 (1b13c6981)
  • nitro: keep leading double slash in renderer request path (75c12c6fb)
  • nuxt: use unambiguous encoding for island hash (6f1b93c64)
  • vite-server: resolve wildcard redirect tails from the matched segments (1e7dfa6a7)
  • nuxt: do not expose details of untrusted thrown errors (8c56b71e4)
  • nuxt: strip trailing slashes in linear time (97424dd21)
  • nitro,webpack: include hosts the CLI allows after loading the config (8c11d965d)
  • webpack: skip hot middleware for forbidden dev requests (3c9645326)
  • rspack,webpack: reject unexpected Host headers in dev middleware (f8d64c9aa)
  • schema,nitro,vite: add devServer.allowedHosts (3e1c7964e)
  • nitro,nuxt: match route rules for paths with encoded slashes (084396b10)
  • schema: only widen workspace dir to a declared workspace root (89d3306d1)
  • nitro: only trust x-forwarded-proto in when opted-in (#36818)
  • nitro: stream the body read through a nuxt/server handler (#36817)
  • kit: suggest the specific fix when loading falls back to jiti (24d75659d)
  • vite: use a single type checker (#36774)
  • nitro,vite: remove windows + virtual dev ssr css links after hydration (#36765)
  • nitro,vite: dedupe dev css by module node (#36420)
  • nuxt: avoid hoisting setup-only values from definePageMeta (#36751)
  • nuxt: only match hydration modifiers after lazy prefix (#36750)
  • kit,nitro,nuxt: make emitted tsconfig/types stable across reruns (#36747)
  • nuxt: render inlined component styles after stylesheet links (#36714)
  • webpack: use valid devtool for hidden client sourcemaps in dev (#36555)

📖 Documentation

  • clarify template dependency regeneration (#36766)
  • revise README structure and headings (#36772)
  • link the Nuxt DevTools docs on nuxt.com (#36769)

... (truncated)

Commits

@dependabot
chore(deps-dev): bump the minor-and-patch group across 1 directory wi…
05f84e1 
…th 17 updates

Bumps the minor-and-patch group with 17 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@microsoft/api-extractor](https://github.com/microsoft/rushstack/tree/HEAD/apps/api-extractor) | `7.59.4` | `7.60.1` |
| [rollup](https://github.com/rollup/rollup) | `4.65.1` | `4.67.4` |
| [astro](https://github.com/withastro/astro/tree/HEAD/packages/astro) | `7.4.2` | `7.4.5` |
| [fake-indexeddb](https://github.com/dumbmatter/fakeIndexedDB) | `6.2.6` | `6.2.7` |
| [fastify](https://github.com/fastify/fastify) | `5.12.7` | `5.12.8` |
| [@hapi/hapi](https://github.com/hapijs/hapi) | `21.4.11` | `21.4.12` |
| [hono](https://github.com/honojs/hono) | `4.13.14` | `4.13.16` |
| [@nestjs/common](https://github.com/nestjs/nest/tree/HEAD/packages/common) | `12.3.1` | `12.3.2` |
| [@nestjs/core](https://github.com/nestjs/nest/tree/HEAD/packages/core) | `12.3.1` | `12.3.2` |
| [@nestjs/platform-express](https://github.com/nestjs/nest/tree/HEAD/packages/platform-express) | `12.3.1` | `12.3.2` |
| [@nestjs/platform-fastify](https://github.com/nestjs/nest/tree/HEAD/packages/platform-fastify) | `12.3.1` | `12.3.2` |
| [nitropack](https://github.com/nitrojs/nitro) | `2.13.5` | `2.13.6` |
| [nuxt](https://github.com/nuxt/nuxt/tree/HEAD/packages/nuxt) | `4.6.2` | `4.6.4` |
| [preact](https://github.com/preactjs/preact) | `11.1.0` | `11.1.1` |
| [svelte](https://github.com/sveltejs/svelte/tree/HEAD/packages/svelte) | `5.57.2` | `5.57.3` |
| [@sveltejs/kit](https://github.com/sveltejs/kit/tree/HEAD/packages/kit) | `3.1.0` | `3.1.1` |
| [@sveltejs/adapter-node](https://github.com/sveltejs/kit/tree/HEAD/packages/adapter-node) | `6.0.0` | `6.0.1` |



Updates `@microsoft/api-extractor` from 7.59.4 to 7.60.1
- [Changelog](https://github.com/microsoft/rushstack/blob/main/apps/api-extractor/CHANGELOG.md)
- [Commits](https://github.com/microsoft/rushstack/commits/HEAD/apps/api-extractor)

Updates `rollup` from 4.65.1 to 4.67.4
- [Release notes](https://github.com/rollup/rollup/releases)
- [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md)
- [Commits](rollup/rollup@v4.65.1...v4.67.4)

Updates `astro` from 7.4.2 to 7.4.5
- [Release notes](https://github.com/withastro/astro/releases)
- [Changelog](https://github.com/withastro/astro/blob/main/packages/astro/CHANGELOG.md)
- [Commits](https://github.com/withastro/astro/commits/astro@7.4.5/packages/astro)

Updates `fake-indexeddb` from 6.2.6 to 6.2.7
- [Release notes](https://github.com/dumbmatter/fakeIndexedDB/releases)
- [Changelog](https://github.com/dumbmatter/fakeIndexedDB/blob/master/CHANGELOG.md)
- [Commits](dumbmatter/fakeIndexedDB@v6.2.6...v6.2.7)

Updates `fastify` from 5.12.7 to 5.12.8
- [Release notes](https://github.com/fastify/fastify/releases)
- [Commits](fastify/fastify@v5.12.7...v5.12.8)

Updates `@hapi/hapi` from 21.4.11 to 21.4.12
- [Release notes](https://github.com/hapijs/hapi/releases)
- [Commits](hapijs/hapi@v21.4.11...v21.4.12)

Updates `hono` from 4.13.14 to 4.13.16
- [Release notes](https://github.com/honojs/hono/releases)
- [Commits](honojs/hono@v4.13.14...v4.13.16)

Updates `@nestjs/common` from 12.3.1 to 12.3.2
- [Release notes](https://github.com/nestjs/nest/releases)
- [Commits](https://github.com/nestjs/nest/commits/v12.3.2/packages/common)

Updates `@nestjs/core` from 12.3.1 to 12.3.2
- [Release notes](https://github.com/nestjs/nest/releases)
- [Commits](https://github.com/nestjs/nest/commits/v12.3.2/packages/core)

Updates `@nestjs/platform-express` from 12.3.1 to 12.3.2
- [Release notes](https://github.com/nestjs/nest/releases)
- [Commits](https://github.com/nestjs/nest/commits/v12.3.2/packages/platform-express)

Updates `@nestjs/platform-fastify` from 12.3.1 to 12.3.2
- [Release notes](https://github.com/nestjs/nest/releases)
- [Commits](https://github.com/nestjs/nest/commits/v12.3.2/packages/platform-fastify)

Updates `nitropack` from 2.13.5 to 2.13.6
- [Release notes](https://github.com/nitrojs/nitro/releases)
- [Changelog](https://github.com/nitrojs/nitro/blob/main/changelog.config.ts)
- [Commits](nitrojs/nitro@v2.13.5...v2.13.6)

Updates `nuxt` from 4.6.2 to 4.6.4
- [Release notes](https://github.com/nuxt/nuxt/releases)
- [Commits](https://github.com/nuxt/nuxt/commits/v4.6.4/packages/nuxt)

Updates `preact` from 11.1.0 to 11.1.1
- [Release notes](https://github.com/preactjs/preact/releases)
- [Commits](preactjs/preact@11.1.0...11.1.1)

Updates `svelte` from 5.57.2 to 5.57.3
- [Release notes](https://github.com/sveltejs/svelte/releases)
- [Changelog](https://github.com/sveltejs/svelte/blob/main/packages/svelte/CHANGELOG.md)
- [Commits](https://github.com/sveltejs/svelte/commits/svelte@5.57.3/packages/svelte)

Updates `@sveltejs/kit` from 3.1.0 to 3.1.1
- [Release notes](https://github.com/sveltejs/kit/releases)
- [Changelog](https://github.com/sveltejs/kit/blob/main/packages/kit/CHANGELOG.md)
- [Commits](https://github.com/sveltejs/kit/commits/@sveltejs/kit@3.1.1/packages/kit)

Updates `@sveltejs/adapter-node` from 6.0.0 to 6.0.1
- [Release notes](https://github.com/sveltejs/kit/releases)
- [Changelog](https://github.com/sveltejs/kit/blob/main/packages/adapter-node/CHANGELOG.md)
- [Commits](https://github.com/sveltejs/kit/commits/@sveltejs/adapter-node@6.0.1/packages/adapter-node)

---
updated-dependencies:
- dependency-name: "@microsoft/api-extractor"
  dependency-version: 7.60.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: rollup
  dependency-version: 4.67.4
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: astro
  dependency-version: 7.4.5
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: fake-indexeddb
  dependency-version: 6.2.7
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: fastify
  dependency-version: 5.12.8
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: "@hapi/hapi"
  dependency-version: 21.4.12
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: hono
  dependency-version: 4.13.16
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: "@nestjs/common"
  dependency-version: 12.3.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: "@nestjs/core"
  dependency-version: 12.3.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: "@nestjs/platform-express"
  dependency-version: 12.3.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: "@nestjs/platform-fastify"
  dependency-version: 12.3.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: nitropack
  dependency-version: 2.13.6
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: nuxt
  dependency-version: 4.6.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: preact
  dependency-version: 11.1.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: svelte
  dependency-version: 5.57.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: "@sveltejs/kit"
  dependency-version: 3.1.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: "@sveltejs/adapter-node"
  dependency-version: 6.0.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Nov 6, 2026
@coderabbitai

coderabbitai Bot commented Nov 6, 2026

Copy link
Copy Markdown

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

Run configuration

  • Source mode: Auto
  • Repository: Unavailable
  • Branch: Unavailable
  • File: No configuration file from this repository applied
  • Commit: Unavailable
  • Layers: Organization UI
  • Review profile: CHILL
  • Plan: Advanced
  • Run ID: edb9946a-7db1-4c06-8858-5e091f7d826a

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • Trigger review
  • Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

Share

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants