fix(deps): update all non-major dependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence	Type	Update
@builder.io/qwik (source)	^1.20.0 → ^1.20.1			dependencies	patch
@sveltejs/vite-plugin-svelte (source)	^7.3.0 → ^7.3.1			devDependencies	patch
@types/node (source)	^24.13.6 → ^24.19.0			devDependencies	minor
@vitejs/devtools (source)	^0.7.5 → ^0.7.6			devDependencies	patch
@vitejs/devtools-rolldown (source)	^0.7.5 → ^0.7.6			devDependencies	patch
@vitejs/devtools-vite (source)	^0.7.5 → ^0.7.6			devDependencies	patch
baseline-browser-mapping	^2.11.25 → ^2.11.26			devDependencies	patch
browserslist	^4.29.0 → ^4.29.1			dependencies	patch
eslint-plugin-n	^18.3.0 → ^18.4.0			devDependencies	minor
github/codeql-action	v4.38.1 → v4.38.2			action	patch
lint-staged	^17.5.1 → ^17.6.0			devDependencies	minor
magic-string	^1.4.1 → ^1.4.2			dependencies	patch
magic-string	^1.4.1 → ^1.4.2			devDependencies	patch
phoenix	^1.8.14 → ^1.8.15			dependencies	patch
vite (source)	^8.3.0 → ^8.3.1			devDependencies	patch
ws	^8.21.3 → ^8.22.0			devDependencies	minor

---

Release Notes

QwikDev/qwik (@​builder.io/qwik)

v1.20.1

Compare Source

Patch Changes

• Async functions in useComputed$ are no longer deprecated, since they now remain supported in Qwik v2. (by @​wmertens in #​8888)

• ✨ qwik migrate-v2 now migrates renamed and removed APIs, tsconfig.json, package.json and Vite 8, adds options that keep the v1 behavior where v2 changed it, and lists the changes that need manual attention. (by @​Varixo in #​9015)

• 🐞🩹 prevent unsafe virtual attribute names in server-rendered HTML (by @​github-actions in #​9035)

• 🐞🩹 Rollup now has stable hashes with large parallel builds, so now Qwik doesn't enforce the workaround any more. (by @​wmertens in #​8691)

• 🐞🩹 useConstant() now retains a null factory result instead of re-running the factory on every render. The retention guard changed from != null to !== undefined, so any defined value (including null) is cached for the lifetime of the component; only a factory that returns undefined is re-run on each render. (by @​youdie006 in #​8827)

sveltejs/vite-plugin-svelte (@​sveltejs/vite-plugin-svelte)

v7.3.1

Compare Source

Patch Changes

• fix: inject the inspector into the client under Vite+ on pnpm, where the realpathed client module has no vite/ segment before dist/ (#​1373)

vitejs/devtools (@​vitejs/devtools)

v0.7.6

Compare Source

   🚀 Features

• core: Support devtools injection in builds  -  by @​webfansplz in #​580 (63c34)

   🐞 Bug Fixes

• Register Vite DevTools for devframe discovery  -  by @​posva in #​579 (d65db)
• Respect project paths and Vite+ build commands  -  by @​hyoban in #​581 (f23bf)
• core: Declare client module resolution before plugin setup  -  by @​morinokami in #​582 (006b0)
• vitest: Embed the tokenized Vitest UI URL  -  by @​zahidzorbaz and Claude Opus 5.5 (1M context) in #​588 (9cef6)

    View changes on GitHub

web-platform-dx/baseline-browser-mapping (baseline-browser-mapping)

v2.11.26

Compare Source

browserslist/browserslist (browserslist)

v4.29.1

Compare Source

• Fixed config name loading protection on Windows (by @​oss-security-shop).
• Fixed case-insensitive negation queries (by @​jakezwang).
• Fixed percentage and supports queries case-insensitive (by @​wahidrizka).
• Fixed old Node.js tests (by @​aaron-belenky).
• Reduced code (by @​charmander).

eslint-community/eslint-plugin-n (eslint-plugin-n)

v18.4.0

Compare Source

🌟 Features

• no-extraneous: Support pnpm workspaces in no-extraneous rules (#​569) (3aae430)

📚 Documentation

• fix broken documentation links (#​567) (569153f)

github/codeql-action (github/codeql-action)

v4.38.2

Compare Source

• Update default CodeQL bundle version to 2.27.1. #​4160

lint-staged/lint-staged (lint-staged)

v17.6.0

Compare Source

Minor Changes

• #​1850 938d3f4 - Task functions like { title, task } can now use a logger function log() to emit output while the task runs. By default, the output will only be visible if the task fails, unless the --verbose option was used. Additionally, when the task rejects, the error will be shown in the output.

  import { defineConfig } from 'lint-staged/config'
  
  export default defineConfig({
    '*': {
      title: 'Fail if PDF files are committed',
      task: async (filepaths, { log }) => {
        const pdfFiles = filepaths.filter((f) => f.toLowerCase().endsWith('.pdf'))
        if (pdfFiles.length > 0) {
          log('PDF files should not be committed: %s', pdfFiles)
          throw new Error('Failed')
        }
      },
    },
  })

• #​1854 30562bc - lint-staged now stages changes to all tracked files modified by tasks, including files that weren’t originally staged or didn’t match the configured globs. This can happen when your task has side-effects, or it's a function that ignores the staged files like () => "prettier --write .".

  If you have unstaged changes in a file and the task also edits that file, your unstaged changes will be staged too. Use --hide-unstaged to hide your changes while tasks run.

Patch Changes

• #​1860 4296532 - The assignment of staged files to lint-staged configuration files (when using multiple, for example in a monorepo) has been rewritten to be more efficient. As a reminder, each staged file is assigned to exactly one configuration (the closest one), even if that config doesn't match the file in its globs.

• #​1861 c45f28a - Fix running parallel tasks for a single glob, when tasks are created by a function. Nesting one level of arrays inside an array of tasks will result in the inner tasks running in parallel. This behavior should now be consistent when creating tasks using functions. In the following example eslint and prettier will run in parallel (for all files, when any JS files are staged):

  import { defineConfig } from 'lint-staged/config'
  
  export default defineConfig({
    '*.js': () => [['eslint --max-warnings=0 .', 'prettier --list-different .']],
  })

• #​1859 f0ea69d - Various performance improvements from skipping redundant internal Git calls.

• #​1856 69d7d17 - Partially staged changes are hidden in a uniquely-named patch file to avoid multiple invocations of lint-staged overwriting it. This makes it safer to run lint-staged in multiple worktrees at the same time.

Rich-Harris/magic-string (magic-string)

v1.4.2

Compare Source

Bug Fixes

• keep the outro when splitting a removed chunk (#​358) (2a665f6)
• skip empty matches inside removed content in replaceAll (#​359) (2eb0f6f)

Performance Improvements

• look up removed content without scanning every chunk (#​357) (ca9e867)

phoenixframework/phoenix (phoenix)

v1.8.15

Compare Source

Bug fixes

• [phx.gen.cert] Fix certificate not being accepted by Chromium (#​6847)
• [phoenix.js] Fix asynchronous transport close tearing down the replacement transport (#​6852)

Enhancements

• [phx.new] Update Tailwind version to 4.3.3

vitejs/vite (vite)

v8.3.1

Compare Source

Bug Fixes

• deps: update all non-major dependencies (#​23482) (3c752c8)
• deps: update all non-major dependencies (#​23537) (e8990c4)
• deps: update rolldown-related dependencies (#​23483) (9aecbbf)
• handle server.ws: false in mergeConfig (#​23511) (f68c0d5)
• merge build.rolldownOptions.output.comments correctly (#​23514) (4aba8d8)
• optimizer: don't skip imports whose binding starts with type (#​23540) (39330f4)
• optimizer: resolve pending discovered dep processing on close before init (#​23567) (5f89433)
• server: avoid reinitializing watcher when adding file after server close (#​23572) (6f831f9)
• sourcemap: skip URL source roots when injecting sources content (#​23519) (04fc30a)

Miscellaneous Chores

• merge prereleases in changelog (#​23466) (99bd9d1)
• optimizer: add debug log when waiting for dep before init (#​23566) (63567c7)
• update optimizeDeps.include comment (#​23489) (6a84c72)

Code Refactoring

• assets regexp use non-capture (#​23491) (f4b4431)
• remove duplicate configurations (#​23532) (9abd99b)
• replace find with some (#​23554) (af7cdf6)

websockets/ws (ws)

v8.22.0

Compare Source

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • Between 12:00 AM and 03:59 AM, only on Monday (* 0-3 * * 1)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.