chore(deps): bump the production-dependencies group with 2 updates

[dependabot]

⚠️ Dependabot is rebasing this PR ⚠️

Rebasing might not happen immediately, so don't worry if this takes some time.

Note: if you make any changes to this PR yourself, they will take precedence over the rebase.

---

Bumps the production-dependencies group with 2 updates: jsonata and vite-plus.

Updates jsonata from 2.1.0 to 2.2.0

Release notes

Sourced from jsonata's releases.

2.2.0 Milestone Release

This release predominantly contains security related fixes and enhancements. Thanks to Doruk Tan Öztürk and Arthur Deierlein for their private disclosures.

• New API to specify resource guardrails on expressions (PR #795)
• Fix ISO8601 regex pattern (PR #793)
• Prevent $lookup from accessing object prototype members (PR #794)
• Enable OIDC publishing to NPM (PR #792)
• Publish step to be triggered by new version tag (PR #796)

2.1.1 Maintenance Release

• Fix picture string parsing for $formatNumber (PR #788)
• Fix $toMillis() with more than 3 digit fractional seconds (PR #782)
• Fix ?: operator returning wrong result when LHS has array predicate (PR #780)
• Fix ?? operator with array predicate on LHS (PR #774)
• Fix function signature for repeating arguments (PR #760)
• Fix precision fix for $string() function (PR #762)
• Fix to prevent $formatNumber() getting into an infinite loop (PR #785)

Changelog

Sourced from jsonata's changelog.

2.2.0 Milestone Release

• New API to specify resource guardrails on expressions (PR #795)
• Fix ISO8601 regex pattern (PR #793)
• Prevent $lookup from accessing object prototype members (PR #794)
• Enable OIDC publishing to NPM (PR #792)
• Publish step to be triggered by new version tag (PR #796)

2.1.1 Maintenance Release

• Fix picture string parsing for $formatNumber (PR #788)
• Fix $toMillis() with more than 3 digit fractional seconds (PR #782)
• Fix ?: operator returning wrong result when LHS has array predicate (PR #780)
• Fix ?? operator with array predicate on LHS (PR #774)
• Fix function signature for repeating arguments (PR #760)
• Fix precision fix for $string() function (PR #762)
• Fix to prevent $formatNumber() getting into an infinite loop (PR #785)

Commits

• 8ee4476 Release v2.2.0 (#797)
• f2dd8fc publish step to be triggered by new version tag (#796)
• 0a7aa35 Create guardrails to limit resource consumption (#795)
• 4c5f4ad prevent $lookup from accessing object prototype members (#794)
• d6ffc17 fix iso8601 regex pattern (#793)
• 71ab342 Enable OIDC publishing to NPM (#792)
• 5d14732 Release v2.1.1 (#791)
• f9632e0 Fix $formatNumber infinite loop on zero/negative values with exponent (#785) ...
• 15e2b08 Update jsonata-java version compatibilty (#789)
• 9588fb4 fix picture string parsing for $formatNumber (#788)
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for jsonata since your current version.

Updates vite-plus from 0.1.20 to 0.1.21

Release notes

Sourced from vite-plus's releases.

vite-plus v0.1.21 — Create, Migrate & Local CLI Power-Up

vp create learns @org templates, vp migrate rewrites more of your codebase, and the local CLI gains full vp pm parity.

Highlights

• Package-manager parity — every vp pm command now works from the local CLI (#1495)
• More Nushell support — broader shell coverage for vp env and related commands (#1305)
• Smarter vp migrate — rewrites named catalogs (#1493), tsdown/client imports & declare module statements (#1541), and tsdown/client / vite/client in tsconfig compilerOptions.types (#1542)
• vp create @org templates — scoped default templates are now supported (#1398)

Features

• Bring all package-manager commands to the local CLI (#1495) — @​fengmk2
• Support @org default templates in vp create (#1398) — @​fengmk2
• Support yarn plugin commands via vp pm plugin (#1540) — @​jong-kyung
• Forward --provenance flag when publishing a package (#1549) — @​cpojer
• More Nushell support (#1305) — @​XiNiHa
• vp migrate: rewrite tsdown/client imports and declare module statements (#1541) — @​naokihaba
• vp migrate: rewrite tsdown/client and vite/client in tsconfig compilerOptions.types (#1542) — @​naokihaba
• vite-task: add output globs for cache restoration (vite-task#375) — @​branchseer
• vite-task: store colored task logs, strip at display when needed (vite-task#378) — @​branchseer
• Upgrade upstream dependencies — rolldown v1.0.0, vite v8.0.11, tsdown 0.22.0 (with new tsx config-loader), oxc Rust crates 0.128.0, oxc npm 0.129.0, oxlint 1.63.0, oxfmt 0.48.0, @vitejs/devtools 0.1.21 (#1521, #1531, #1548) — @​voidzero-guard[bot]

Fixes & Enhancements

• vp migrate: rewrite named catalogs (#1493) — @​lyzno1
• Show create and migrate in local CLI top-level help (#1508) — @​nurazon59
• Fish env setup using string-literal command for vp env commands (#1518) — @​mikkurogue
• Auto-pass --ignore-scripts when pnpm >=11 in migrate/create (#1533) — @​fengmk2
• Route Windows .cmd shims through PowerShell for pm commands (#1498) — @​fengmk2
• Add vite-plus/pack/client export as tsdown/client equivalent (#1501) — @​naokihaba
• Publish release as draft to support immutable releases (#1558) — @​fengmk2
• Preserve string-literal tabs in convertTabsToSpaces (#1559) — @​fengmk2
• Include docs/ in fmt and lint (#1552) — @​fengmk2
• vite-task: move FORCE_COLOR fallback after pattern filtering (vite-task#379) — @​branchseer
• vite-task: preserve PATHEXT for Windows cached tasks (vite-task#366) — @​SegaraRai
• Bump vite-task to c63db22 (#1560) — @​branchseer

Refactor

• Convert team data file to TypeScript (#1515) — @​jong-kyung

Docs

• Add filename labels to configuration code blocks (#1496) — @​fengmk2
• Add monorepo overrides guide (#1535) — @​fengmk2
• Improve "before" CI usage to actual use case (#1551) — @​Mister-Hope

Chore

... (truncated)

Commits

• df79d2d chore: bump vite-task to c63db22 (#1560)
• bed0936 fix(test): preserve string-literal tabs in convertTabsToSpaces (#1559)
• c0fcf31 feat(cli): more Nushell support (#1305)
• 81abf28 feat: Forward --provenance flag when publishing a package. (#1549)
• adbacfb feat(cli): support yarn plugin commands via vp pm plugin (#1540)
• 26500fd feat(migration): rewrite tsdown/client and vite/client in tsconfig compilerOp...
• 49964fe fix: add vite-plus/pack/client export as tsdown/client equivalent (#1501)
• 5439608 ci: publish preview packages to pkg.pr.new (#1526)
• dc41b71 fix(cli): route Windows .cmd shims through PowerShell for pm commands (#1498)
• b92a1af fix(cli): auto-pass --ignore-scripts when pnpm >=11 in migrate/create (#1533)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions