chore(deps): update all non-major dependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence	Type	Update
@types/node (source)	^24.9.2 -> ^24.10.1			devDependencies	minor
axios (source)	^1.13.1 -> ^1.13.2			devDependencies	patch
es-toolkit (source)	^1.41.0 -> ^1.42.0			devDependencies	minor
eslint (source)	^9.39.0 -> ^9.39.1			devDependencies	patch
lint-staged	^16.2.6 -> ^16.2.7			devDependencies	patch
node	24.11.0 -> 24.11.1			uses-with	patch
ofetch	^1.5.0 -> ^1.5.1			devDependencies	patch
pnpm (source)	10.20.0 -> 10.24.0			packageManager	minor
prettier (source)	^3.6.2 -> ^3.7.3			devDependencies	minor
tsx (source)	^4.20.6 -> ^4.21.0			devDependencies	minor

---

Release Notes

axios/axios (axios)

v1.13.2

Compare Source

Bug Fixes

• http: fix 'socket hang up' bug for keep-alive requests when using timeouts; (#​7206) (8d37233)
• http: use default export for http2 module to support stubs; (#​7196) (0588880)

Performance Improvements

• http: fix early loop exit; (#​7202) (12c314b)

Contributors to this release

• Dmitriy Mozgovoy
• Kasper Isager Dalsgarð

toss/es-toolkit (es-toolkit)

v1.42.0

Compare Source

Released on November 17th, 2025.

• Added new async utilities: filterAsync, flatMapAsync, forEachAsync, mapAsync, reduceAsync, and limitAsync for handling asynchronous operations.
• Exported ThrottleOptions and DebounceOptions interfaces for better type support.
• Fixed isFinite to implement type predicate to narrow type to number.
• Fixed isSafeInteger to implement type predicate to narrow type to number.
• Fixed omit to prevent adding index properties to array-like objects.
• Fixed mergeWith to remove unnecessary nullish coalescing for 100% branch coverage.
• Fixed compat/updateWith to remove unreachable code and add prototype pollution test.
• Updated documentation headings for consistency.
• Improved test coverage for compat/mergeWith, compat/unset, get, toMerged, mergeWith, and compat/intersectionBy with additional edge cases and security tests.

We sincerely thank @​Debbl, @​wo-o29, @​raon0211, @​Yeom-JinHo, @​sukvvon, and @​D-Sketon for their contributions. We appreciate your great efforts!

eslint/eslint (eslint)

v9.39.1

Compare Source

lint-staged/lint-staged (lint-staged)

v16.2.7

Compare Source

Patch Changes

• #​1711 ef74c8d Thanks @​iiroj! - Do not display a "failed to spawn" error message when a task fails normally. This message is reserved for when the task didn't run because spawning it failed.

actions/node-versions (node)

v24.11.1: 24.11.1

Compare Source

Node.js 24.11.1

unjs/ofetch (ofetch)

v1.5.1

Compare Source

compare changes

🩹 Fixes

• Normalize options.headers (again) after onRequest hook (#​524)

❤️ Contributors

• Kricsleo (@​kricsleo)

pnpm/pnpm (pnpm)

v10.24.0

Compare Source

v10.23.0: pnpm 10.23

Compare Source

Minor Changes

• Added --lockfile-only option to pnpm list #​10020.

Patch Changes

• pnpm self-update should download pnpm from the configured npm registry #​10205.
• pnpm self-update should always install the non-executable pnpm package (pnpm in the registry) and never the @pnpm/exe package, when installing v11 or newer. We currently cannot ship @pnpm/exe as pkg doesn't work with ESM #​10190.
• Node.js runtime is not added to "dependencies" on pnpm add, if there's a engines.runtime setting declared in package.json #​10209.
• The installation should fail if an optional dependency cannot be installed due to a trust policy check failure #​10208.
• pnpm list and pnpm why now display npm: protocol for aliased packages (e.g., foo npm:[email protected]) #​8660.
• Don't add an extra slash to the Node.js mirror URL #​10204.
• pnpm store prune should not fail if the store contains Node.js packages #​10131.

Platinum Sponsors

Gold Sponsors

v10.22.0: pnpm 10.22

Compare Source

Minor Changes

• Added support for trustPolicyExclude #​10164.

  You can now list one or more specific packages or versions that pnpm should allow to install, even if those packages don't satisfy the trust policy requirement. For example:

  trustPolicy: no-downgrade
  trustPolicyExclude:
    - [email protected]
    - [email protected] || 5.102.1

• Allow to override the engines field on publish by the publishConfig.engines field.

Patch Changes

• Don't crash when two processes of pnpm are hardlinking the contents of a directory to the same destination simultaneously #​10179.

Platinum Sponsors

Gold Sponsors

v10.21.0

Compare Source

prettier/prettier (prettier)

v3.7.3

Compare Source

diff

API: Fix prettier.getFileInfo() change that breaks VSCode extension (#​18375 by @​fisker)

An internal refactor accidentally broke the VSCode extension plugin loading.

v3.7.2

Compare Source

diff

JavaScript: Fix string print when switching quotes (#​18351 by @​fisker)

// Input
console.log("A descriptor\\'s .kind must be \"method\" or \"field\".")

// Prettier 3.7.1
console.log('A descriptor\\'s .kind must be "method" or "field".');

// Prettier 3.7.2
console.log('A descriptor\\\'s .kind must be "method" or "field".');

JavaScript: Preserve quote for embedded HTML attribute values (#​18352 by @​kovsu)

// Input
const html = /* HTML */ ` <div class="${styles.banner}"></div> `;

// Prettier 3.7.1
const html = /* HTML */ ` <div class=${styles.banner}></div> `;

// Prettier 3.7.2
const html = /* HTML */ ` <div class="${styles.banner}"></div> `;

TypeScript: Fix comment in empty type literal (#​18364 by @​fisker)

// Input
export type XXX = {
  // tbd
};

// Prettier 3.7.1
export type XXX = { // tbd };

// Prettier 3.7.2
export type XXX = {
  // tbd
};

v3.7.1

Compare Source

diff

API: Fix performance regression in doc printer (#​18342 by @​fisker)

Prettier 3.7.1 can be very slow when formatting big files, the regression has been fixed.

v3.7.0

Compare Source

diff

🔗 Release Notes

privatenumber/tsx (tsx)

v4.21.0

Compare Source

---

Configuration

📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM, on day 1 of the month ( * 0-3 1 * * ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.