fix(deps): update all non-major dependencies

[renovate]

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Age	Confidence
@commitlint/cli (source)	^20.4.4 → ^20.5.3
@commitlint/config-conventional (source)	^20.4.4 → ^20.5.3
@favware/cliff-jumper	^6.0.0 → ^6.1.0
@types/node (source)	^24.12.0 → ^24.13.3
@vitest/coverage-v8 (source)	^4.1.0 → ^4.1.10
acorn	^8.16.0 → ^8.17.0
bullmq (source)	5.71.0 → 5.81.1
concurrently	^9.2.1 → ^9.2.4
discord.js (source)	^14.25.1 → ^14.27.0
eslint-plugin-prettier	^5.5.5 → ^5.5.6
i18next (source)	^25.8.18 → ^25.10.10
prettier (source)	^3.8.1 → ^3.9.6
tldts	^7.0.25 → ^7.4.9
tsx (source)	^4.21.0 → ^4.23.1
turbo (source)	^2.8.17 → ^2.10.6
undici (source)	^7.24.3 → ^7.28.0
vitest (source)	^4.1.0 → ^4.1.10
yarn (source)	4.12.0 → 4.17.1

---

Release Notes

conventional-changelog/commitlint (@​commitlint/cli)

v20.5.3

Compare Source

Note: Version bump only for package @​commitlint/cli

v20.5.2

Compare Source

Note: Version bump only for package @​commitlint/cli

v20.5.0

Compare Source

Bug Fixes

• cli: validate that --cwd directory exists before execution (#​4658) (cf80f75), closes #​4595

20.4.4 (2026-03-12)

Note: Version bump only for package @​commitlint/cli

20.4.3 (2026-03-03)

Bug Fixes

• footer parser does not escape special chars for regex #​4560 (#​4634) (8ff7c7f)

20.4.2 (2026-02-19)

Note: Version bump only for package @​commitlint/cli

20.4.1 (2026-02-02)

Note: Version bump only for package @​commitlint/cli

conventional-changelog/commitlint (@​commitlint/config-conventional)

v20.5.3

Compare Source

Note: Version bump only for package @​commitlint/config-conventional

v20.5.0

Compare Source

Note: Version bump only for package @​commitlint/config-conventional

20.4.4 (2026-03-12)

Note: Version bump only for package @​commitlint/config-conventional

20.4.3 (2026-03-03)

Bug Fixes

• footer parser does not escape special chars for regex #​4560 (#​4634) (8ff7c7f)

20.4.2 (2026-02-19)

Note: Version bump only for package @​commitlint/config-conventional

20.4.1 (2026-02-02)

Note: Version bump only for package @​commitlint/config-conventional

favware/cliff-jumper (@​favware/cliff-jumper)

v6.1.0

Compare Source

🐛 Bug Fixes

• deps: Update dependency smol-toml to ^1.6.1 (bc7a346) (#​303)
• deps: Update all non-major dependencies (dfce8f5) (#​296)
• deps: Update all non-major dependencies (d859ac9) (#​293)
• deps: Update all non-major dependencies (eaac1d2) (#​292)
• deps: Update all non-major dependencies (c929553) (#​291)
• deps: Update dependency smol-toml to ^1.6.0 (f9e7661) (#​287)
• deps: Update dependency git-cliff to ^2.11.0 (d7fa532) (#​286)
• deps: Update all non-major dependencies (236dc82) (#​283)
• deps: Update all non-major dependencies (e595c59) (#​280)
• deps: Update all non-major dependencies (fb55e53) (#​277)
• deps: Update all non-major dependencies (026d30a) (#​275)
• deps: Update all non-major dependencies (7f22325) (#​274)
• deps: Update all non-major dependencies (c216d79) (#​270)
• deps: Update all non-major dependencies (2ffd637) (#​269)
• deps: Update all non-major dependencies (5ad8486) (#​268)
• deps: Update all non-major dependencies (ad3837d) (#​260)
• deps: Update all non-major dependencies (b274e80) (#​259)
• deps: Update all non-major dependencies (b565a7b) (#​257)
• deps: Update all non-major dependencies (88192c5) (#​256)
• deps: Update all non-major dependencies (9ee2fe8) (#​255)
• deps: Update all non-major dependencies (31e2532) (#​251)
• deps: Update octokit monorepo (33182ae) (#​252)
• deps: Update dependency commander to v14 (fcab80c) (#​250)
• deps: Update all non-major dependencies (9ab2eb3) (#​249)
• deps: Update all non-major dependencies (fa29541) (#​247)
• deps: Update all non-major dependencies (91c8e32) (#​246)
• deps: Update all non-major dependencies (f483841) (#​242)
• deps: Update dependency conventional-recommended-bump to v11 (5958382) (#​238)
• deps: Update all non-major dependencies (be692db) (#​236)
• deps: Update all non-major dependencies (60d8186) (#​232)
• deps: Update all non-major dependencies (fbc3065) (#​231)
• deps: Update all non-major dependencies (7330784) (#​230)
• deps: Update dependency @​octokit/plugin-retry to ^7.1.3 (c582989) (#​227)

🚀 Features

• Add github-base-url option to publish to GHES and GHEC (51cbf49)

vitest-dev/vitest (@​vitest/coverage-v8)

v4.1.10

Compare Source

   🐞 Bug Fixes

• browser: Check fs access in builtin commands [backport to v4]  -  by @​hi-ogawa, Hiroshi Ogawa and OpenCode (claude-opus-4-8) in #​10680 (5c18d)
• vm: Fix external module resolve error with deps optimizer query for encoded URI [backport to v4]  -  by @​SveLil and @​hi-ogawa in #​10661 (bae52)

    View changes on GitHub

v4.1.9

Compare Source

🐞 Bug Fixes

• Fix importOriginal with optimizer and query import [backport to v4] - by Hiroshi Ogawa, David Harris, Codexand Vladimir in #​10546 (a5180)
• browser:
  • Wait for orchestrator readiness before resolving browser sessions [backport to v4] - by Vladimir and Séamus O'Connor in #​10555 (7fb29)
  • Wait for iframe tester readiness before preparing [backport to v4] - by Vladimir and Séamus O'Connor in #​10497 and #​10556 (fbc62)
• mocker:
  • Hoist vi.mock() for vite-plus/test imports [backport to v4] - by Hiroshi Ogawa, LongYinan, Claude Opus 4.8 and Vladimir in #​10548 (2c955)
• pool:
  • Prevent test run hang on worker crash [backport to v4] - by Ari Perkkiö and Jattioui Ismail in #​10543 and #​10564 (934b0)

View changes on GitHub

v4.1.8

Compare Source

   🐞 Bug Fixes

• browser:
  • Disable client cdp API when allowWrite/allowExec: false [backport to v4]  -  by @​hi-ogawa and Codex in #​10450 (e4067)
  • Remove orphaned Playwright route when same module is mocked via multiple ids [backport to v4]  -  by @​toxik and @​Zelys-DFKH in #​10474 (675b4)

    View changes on GitHub

v4.1.7

Compare Source

   🐞 Bug Fixes

• runner: Limit concurrency per task branch in addition to per leaf callbacks (backport)  -  by @​hi-ogawa in #​10384 (4f0f2)

    View changes on GitHub

v4.1.6

Compare Source

   🐞 Bug Fixes

• browser: Provide project reference in ToMatchScreenshotResolvePath  -  by @​macarie and @​sheremet-va in #​10138 (31882)
• Global sequence.concurrent: true with top-level test(..., { concurrent: false }) + depreacte sequential test API and options  -  by @​hi-ogawa, Codex and @​sheremet-va in #​10196 (2847d)
• browser: Simplify orchestrator otel carrier  -  by @​hi-ogawa in #​10285 (18af9)

   🏎 Performance

• Stringify diff objects only once  -  by @​sheremet-va in #​10276 (9f7b1)

    View changes on GitHub

v4.1.5

Compare Source

   🚀 Experimental Features

• coverage: Istanbul to support instrumenter option  -  by @​BartWaardenburg and @​AriPerkkio in #​10119 (0e0ff)

   🐞 Bug Fixes

• --project negation excludes browser instances  -  by @​felamaslen in #​10131 (9423d)
• Project color label on html reporter  -  by @​hi-ogawa in #​10142 (596f7)
• Fix vi.defineHelper called as object method  -  by @​hi-ogawa in #​10163 (122c2)
• Alias agent reporter to minimal  -  by @​sheremet-va in #​10157 (663b9)
• Respect diff config options in soft assertions  -  by @​Copilot, sheremet-va and @​sheremet-va in #​8696 (9787d)
• Respect diff config options in soft assertions "  -  by @​sheremet-va in #​8696 (7dc6d)
• ast-collect: Recognize _vi_import prefix in static test discovery  -  by @​Yejneshwar in #​10129 (32546)
• coverage: Descriptive error message when reports directory is removed during test run  -  by @​DaveT1991 and @​AriPerkkio in #​10117 (14133)
• snapshot: Increase default snapshot max output length  -  by @​hi-ogawa and Codex in #​10150 (21e66)
• ui: Fix jsx/tsx syntax highlight  -  by @​hi-ogawa in #​10152 (f1b1f)
• web-worker: Support MessagePort objects referenced inside postMessage data  -  by @​whitphx and Claude Opus 4.6 (1M context) in #​9927 and #​10124 (7ad7d)
• api: Make test-specification options writable  -  by @​sheremet-va in #​10154 (6abd5)

    View changes on GitHub

v4.1.4

Compare Source

   🚀 Features

• coverage:
  • Default to text reporter skipFull if agent detected  -  by @​hi-ogawa in #​10018 (53757)
• experimental:
  • Expose assertion as a public field  -  by @​sheremet-va in #​10095 (a120e)
  • Support aria snapshot  -  by @​hi-ogawa, Claude Opus 4.6 (1M context), @​AriPerkkio, Codex and @​sheremet-va in #​9668 (d4fbb)
• reporter:
  • Add filterMeta option to json reporter  -  by @​nami8824 and @​sheremet-va in #​10078 (b77de)

   🐞 Bug Fixes

• Use "black" foreground for labeled terminal message to ensure contrast  -  by @​hi-ogawa in #​10076 (203f0)
• Make expect(..., message) consistent as error message prefix  -  by @​hi-ogawa and Codex in #​10068 (a1b5f)
• Do not hoist imports whose names match class properties .  -  by @​SunsetFi in #​10093 and #​10094 (0fc4b)
• browser: Spread user server options into browser Vite server in project  -  by @​GoldStrikeArch in #​10049 (65c9d)

    View changes on GitHub

v4.1.3

Compare Source

   🚀 Experimental Features

• Add experimental.preParse flag  -  by @​sheremet-va in #​10070 (78273)
• Support browser.locators.exact option  -  by @​sheremet-va in #​10013 (48799)
• Add TestAttachment.bodyEncoding  -  by @​hi-ogawa in #​9969 (89ca0)
• Support custom snapshot matcher  -  by @​hi-ogawa, Claude Sonnet 4.6 and Codex in #​9973 (59b0e)

   🐞 Bug Fixes

• Advance fake timers with expect.poll interval  -  by @​hi-ogawa and Claude Sonnet 4.6 in #​10022 (3f5bf)
• Add @vitest/coverage-v8 and @vitest/coverage-istanbul as optional dependency  -  by @​alan-agius4 in #​10025 (146d4)
• Fix defineHelper for webkit async stack trace + update playwright 1.59.0  -  by @​hi-ogawa in #​10036 (5a5fa)
• Fix suite hook throwing errors for unused auto test-scoped fixture  -  by @​hi-ogawa and Claude Sonnet 4.6 in #​10035 (39865)
• expect:
  • Remove JestExtendError.context from verbose error reporting  -  by @​hi-ogawa in #​9983 (66751)
  • Don't leak "runner" types  -  by @​sheremet-va in #​10004 (ec204)
• snapshot:
  • Fix flagging obsolete snapshots for snapshot properties mismatch  -  by @​hi-ogawa and Claude Sonnet 4.6 in #​9986 (6b869)
  • Export custom snapshot matcher helper from vitest  -  by @​hi-ogawa and Codex in #​10042 (691d3)
• ui:
  • Don't leak vite types  -  by @​sheremet-va in #​10005 (fdff1)
• vm:
  • Fix external module resolve error with deps optimizer query  -  by @​hi-ogawa and Claude Sonnet 4.6 in #​10024 (9dbf4)

    View changes on GitHub

v4.1.2

Compare Source

This release bumps Vitest's flatted version and removes version pinning to resolve flatted's CVE related issues (#​9975).

   🐞 Bug Fixes

• Don't resolve setupFiles from parent directory  -  by @​hi-ogawa in #​9960 (7aa93)
• Ensure sequential mock/unmock resolution  -  by @​hi-ogawa and Claude Opus 4.6 in #​9830 (7c065)
• browser: Take failure screenshot if toMatchScreenshot can't capture a stable screenshot  -  by @​macarie in #​9847 (faace)
• coverage: Correct coverageConfigDefaults values and types  -  by @​Arthie in #​9940 (b3c99)
• pretty-format: Fix output limit over counting  -  by @​hi-ogawa in #​9965 (d3b7a)
• Disable colors if agent is detected  -  by @​sheremet-va and @​AriPerkkio in #​9851 (6f97b)

    View changes on GitHub

v4.1.1

Compare Source

   🚀 Features

• experimental:
  • Expose matchesTagsFilter to test if the current filter matches tags  -  by @​sheremet-va in #​9913 (eec53)
  • Introduce experimental.vcsProvider  -  by @​sheremet-va in #​9928 (56115)

   🐞 Bug Fixes

• Mark TestProject.testFilesList internal properly  -  by @​sapphi-red in #​9867 (54f26)
• Detect fixture that returns without calling use  -  by @​oilater in #​9831 and #​9861 (633ae)
• Drop vite 8.beta support  -  by @​AriPerkkio in #​9862 (b78f5)
• Type regression in vi.mocked() static class methods  -  by @​purepear and @​hi-ogawa in #​9857 (90926)
• Properly re-evaluate actual modules of mocked external  -  by @​hi-ogawa in #​9898 (ae5ec)
• Preserve coverage report when html reporter overlaps  -  by @​hi-ogawa in #​9889 (2d81a)
• Provide vi.advanceTimers to the preview provider  -  by @​sheremet-va in #​9891 (1bc3e)
• Don't leak event listener in playwright provider  -  by @​sheremet-va in #​9910 (d9355)
• Open browser in --standalone mode without running tests  -  by @​sheremet-va in #​9911 (e78ad)
• Guard disposable and optional body  -  by @​sheremet-va in #​9912 (6fdb2)
• Resolve retry.condition RegExp serialization issue  -  by @​nstepien and @​hi-ogawa in #​9942 (7b605)
• collect:
  • Don't treat extra props on test return as tests  -  by @​sheremet-va in #​9871 (141e7)
• coverage:
  • Simplify provider types  -  by @​AriPerkkio in #​9931 (aaf9f)
  • Load built-in provider without module runner  -  by @​AriPerkkio in #​9939 (bf892)
• expect:
  • Soft assertions continue after .resolves/.rejects promise errors  -  by @​mixelburg, Maks Pikov, Claude Opus 4.6 (1M context) and @​hi-ogawa in #​9843 (6d74b)
  • Fix sinon-chai style API  -  by @​hi-ogawa in #​9943 (0f08d)
• pretty-format:
  • Limit output for large object  -  by @​hi-ogawa and Claude Opus 4.6 (1M context) in #​9949 (0d5f9)

    View changes on GitHub

acornjs/acorn (acorn)

v8.17.0

Compare Source

taskforcesh/bullmq (bullmq)

v5.81.1

Compare Source

v5.81.0

Compare Source

v5.80.12

Compare Source

v5.80.11

Compare Source

v5.80.10

Compare Source

Bug Fixes

• ci: remove stale OSV ignore (#​4320) (88730b0)

v5.80.9

Compare Source

Performance Improvements

• flow-producer: reuse queue's shared Scripts instance in jobs fixes #​4263 (#​4308) (4f4b574)

v5.80.8

Compare Source

Bug Fixes

• scheduler: walk past stale slots when re-upserting under same id (#​4299) (e8af563)

v5.80.7

Compare Source

Bug Fixes

• worker: move stalled job to failed when fetched manually (#​4294) (c4a0a4a)

v5.80.6

Compare Source

Bug Fixes

• sandbox: preserve child_process exports in null-stdio (#​4301) (5044cf8)

v5.80.5

Compare Source

Bug Fixes

• sandbox: kill children that fail init and surface refusal errors fixes #​4283 (#​4284) (7dd064e)

v5.80.4

Compare Source

Bug Fixes

• deps: update dependency ioredis to v5.11.1 [security] (#​4282) (d978d72)

v5.80.3

Compare Source

Bug Fixes

• fix potential job id integer to string conversion (#​4262) (4e8b595)

v5.80.2

Compare Source

Bug Fixes

• job-scheduler: respect offset option in upsertJobScheduler (elixir) (rust) (#​3993) (78bbb25)

v5.80.1

Compare Source

Bug Fixes

• job: enforce priority max of 2^21-1 to preserve FIFO at the boundary (#​4261) (418de1e)

v5.80.0

Compare Source

v5.79.4

Compare Source

Bug Fixes

• job-scheduler: coerce string offset in Lua helper (#​4266) (python) (elixir) (5a88614)

v5.79.3

Compare Source

Bug Fixes

• queue-events: correct delay event number type and documentation (#​3989) (6ffd88a)

v5.79.2

Compare Source

Bug Fixes

• flow: use correct data structure when retrying failed child using ignoreDependencyOnFailure fixes #​4235 (#​4236) (6f1b2e3)

v5.79.1

Compare Source

Bug Fixes

• node-redis: accept plain createClient result without cast (#​4201) (#​4209) (1aefd5b)

v5.79.0

Compare Source

v5.78.1

Compare Source

Bug Fixes

• scheduler: fail stalled jobs if scheduler does not longer exist (elixir) (rust) (#​4222) (d1fcda5)

v5.78.0

Compare Source

Features

• rust: initial implementation of rust support (#​4200) (38798cc)

v5.77.7

Compare Source

Bug Fixes

• deps: update dependency msgpackr to v2.0.2 [security] (#​4202) (fbe04af)

v5.77.6

Compare Source

Bug Fixes

• types: change NodeRedisRawClient to be node-redis compliant ([#​4195](https://redirect.github.com/taskf

✂ Note

PR body was truncated to here.

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • "before 12pm on Sunday"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud