chore(deps): update safe automerge

[renovate]

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Age	Confidence
@inquirer/prompts (source)	8.3.2 → 8.4.1
@platformatic/control	3.41.0 → 3.52.1
@platformatic/gateway	3.41.0 → 3.52.1
@platformatic/runtime	3.41.0 → 3.52.1
@platformatic/service	3.41.0 → 3.52.1
@platformatic/vite	3.41.0 → 3.52.1
@platformatic/wattpm-pprof-capture	3.41.0 → 3.52.1
@playwright/test (source)	1.58.2 → 1.59.1
@scalar/api-reference-react (source)	0.9.9 → 0.9.22
@types/node (source)	24.12.0 → 24.12.2
autoprefixer	10.4.27 → 10.5.0
fastify (source)	5.8.2 → 5.8.4
playwright (source)	1.58.2 → 1.59.1
react (source)	19.2.4 → 19.2.5
react-dom (source)	19.2.4 → 19.2.5
react-router-dom (source)	7.13.1 → 7.14.1
undici (source)	7.24.4 → 7.25.0
vite (source)	7.3.1 → 7.3.2
vitest (source)	4.1.0 → 4.1.4
wattpm (source)	3.41.0 → 3.52.1
ws	8.19.0 → 8.20.0

---

Release Notes

SBoudrias/Inquirer.js (@​inquirer/prompts)

v8.4.1

Compare Source

• Improve expand prompt type inferrence.

v8.4.0

Compare Source

• Feat: Added a loading message while validating editor prompt input.
• Type improvement: Better type inference with checkbox, search and expand prompts.
• Fix: editor prompt not always properly handling editor path on windows.

platformatic/platformatic (@​platformatic/control)

v3.52.1

Compare Source

What's Changed

• chore(deps): update dependency fastify to v5.8.4 by @​renovate[bot] in #​4726
• chore(deps): update dependency graphql to v16.13.2 by @​renovate[bot] in #​4727
• fix: use ITC to collect health metrics for child process workers by @​mcollina in #​4729

Full Changelog: platformatic/platformatic@v3.52.0...v3.52.1

v3.52.0

Compare Source

What's Changed

• chore: migrate @platformatic/sql-graphql type tests to TSTyche by @​mrazauskas in #​4719
• fix: do not force server.hostname to 127.0.0.1 when unset by @​mcollina in #​4720

Full Changelog: platformatic/platformatic@v3.51.0...v3.52.0

v3.51.0

Compare Source

What's Changed

• fix: move tstyche to dev dependencies by @​mrazauskas in #​4716
• feat: add mqemitter typings to SQLEventsPluginOptions by @​mrazauskas in #​4717
• chore(deps): update dependency fast-jwt to v6.2.1 [security] by @​renovate[bot] in #​4718
• fix: Allow custom socket paths. by @​ShogunPanda in #​4721

Full Changelog: platformatic/platformatic@v3.50.0...v3.51.0

v3.50.0

Compare Source

What's Changed

• fix(docs): reference root .env instead of non-existent web/db/.env in tutorial by @​mcollina in #​4699
• chore(deps): update dependency @​types/node to v22.19.17 by @​renovate[bot] in #​4706
• chore(deps): update dependency fastify to v5.8.4 by @​renovate[bot] in #​4707
• fix: fix platformatic/runtime type declarations by @​mrazauskas in #​4704
• chore: migrate platformatic/sql-openapi type tests to TSTyche by @​mrazauskas in #​4705
• chore(deps): update dependency @​nestjs/core to v11.1.18 [security] by @​renovate[bot] in #​4709
• chore(deps): update dependency vite to v7.3.2 [security] by @​renovate[bot] in #​4710
• chore(deps): update dependency @​fastify/http-proxy to v11.4.3 by @​renovate[bot] in #​4702
• chore(deps): update dependency fast-jwt to v6 [security] by @​renovate[bot] in #​4698
• fix: handle revalidate: false in Valkey cache handlers for static pages by @​mcollina in #​4713
• feat: Drop support for Astro 4.x and 5.x. by @​ShogunPanda in #​4714
• feat: Support custom process spawner. by @​ShogunPanda in #​4715
• feat(next): support Next.js "use cache: remote" directive by @​Ic3b3rg in #​4694

New Contributors

• @​Ic3b3rg made their first contribution in #​4694

Full Changelog: platformatic/platformatic@v3.49.1...v3.50.0

v3.49.1

Compare Source

What's Changed

• chore(deps): update actions/add-to-project digest to 27022a1 by @​renovate[bot] in #​4701
• fix: Added missing option in transform. by @​ShogunPanda in #​4703

Full Changelog: platformatic/platformatic@v3.49.0...v3.49.1

v3.49.0

Compare Source

What's Changed

• fix: Additional types fixes. by @​ShogunPanda in #​4700

Full Changelog: platformatic/platformatic@v3.48.0...v3.49.0

v3.48.0

Compare Source

Full Changelog: platformatic/platformatic@v3.47.0...v3.48.0

v3.47.0

What's Changed

• fix: Fixed location header rewriting. by @​ShogunPanda in #​4689
• fix: fix typings of ITCConstructorOptions by @​mrazauskas in #​4674
• chore(deps): update actions/add-to-project digest to 944219d by @​renovate[bot] in #​4690
• fix(docs): use new migration files in CRUD tutorial by @​mcollina in #​4691
• feat: add extension point to createCliLogger by @​MzUgM in #​4688
• Configuring watt for Cloudwatch by @​MzUgM in #​4693
• fix: prevent gateway entrypoint premature exit and port leak on restart by @​mcollina in #​4692
• ECS guide by @​MzUgM in #​4695
• fix: Added missing module in schemas. by @​ShogunPanda in #​4696
• feat: Added Typescript support to all capabilities. by @​ShogunPanda in #​4697

Full Changelog: platformatic/platformatic@v3.45.0...v3.47.0

v3.45.0

Compare Source

What's Changed

• chore(deps): update dependency fastify to v5.8.3 [security] by @​renovate[bot] in #​4685
• chore(deps): update dependency yaml to v2.8.3 [security] by @​renovate[bot] in #​4686
• fix(create-wattpm): allow better-sqlite3 builds for pnpm by @​mcollina in #​4683
• feat: Added rewritePrefix support to gateway. by @​ShogunPanda in #​4687

Full Changelog: platformatic/platformatic@v3.44.0...v3.45.0

v3.44.0

Compare Source

What's Changed

• feat: Support preRewrite in gateway custom logic. by @​ShogunPanda in #​4680
• chore(deps): update dependency astro to v5.18.1 by @​renovate[bot] in #​4660

Full Changelog: platformatic/platformatic@v3.43.0...v3.44.0

v3.43.0

Compare Source

What's Changed

• add updateMany and insert in db-authorization role types by @​Akallabet in #​4669
• chore(deps): update dependency @​babel/parser to v7.29.2 by @​renovate[bot] in #​4670
• chore(deps): update dependency @​fastify/http-proxy to v11.4.2 by @​renovate[bot] in #​4671
• fix: Do not override entrypoint port when unset. by @​ShogunPanda in #​4673
• feat: Added new customization options. by @​ShogunPanda in #​4668
• fix(wattpm): prevent help crash for snapshot and pprof by @​mcollina in #​4677
• fix: fix typings of getGlobal() by @​mrazauskas in #​4656
• feat: Rewritten override logic. by @​ShogunPanda in #​4675
• feat: Add runtime envfile option. by @​ShogunPanda in #​4678

Full Changelog: platformatic/platformatic@v3.42.0...v3.43.0

v3.42.0

Compare Source

What's Changed

• chore(deps): update dependency tar to v7.5.11 [security] by @​renovate[bot] in #​4654
• feat: add ignoreAllReverseRoutes config option for @​platformatic/db by @​Akallabet in #​4655
• fix(deps): update dependency undici to v7.24.0 [security] by @​renovate[bot] in #​4658
• feat: add missing @platformatic/foundation types by @​mrazauskas in #​4657
• chore(deps): update actions/add-to-project digest to ee3e379 by @​renovate[bot] in #​4659
• docs: fix and add missing package READMEs by @​mcollina in #​4663
• fix(deps): update dependency next to v16.1.7 [security] by @​renovate[bot] in #​4664
• feat: add wattpm heap-snapshot command by @​mcollina in #​4667
• chore(deps): Update pino in @platformatic/runtime by @​gijs-martens in #​4666

New Contributors

• @​gijs-martens made their first contribution in #​4666

Full Changelog: platformatic/platformatic@v3.41.0...v3.42.0

microsoft/playwright (@​playwright/test)

v1.59.1

Compare Source

v1.59.0

Compare Source

scalar/scalar (@​scalar/api-reference-react)

v0.9.22

v0.9.21

v0.9.20

v0.9.19

Patch Changes

• #​8656: fix react wrapper production crash by defining Vue bundler flags before importing api-reference

v0.9.18

v0.9.17

v0.9.16

v0.9.15

v0.9.14

v0.9.13

v0.9.12

v0.9.11

Patch Changes

• #​8466: chore: new build pipeline

v0.9.10

Patch Changes

Updated Dependencies

• @​scalar/api-reference@​1.49.0
  • #​8443: fix hash-prefixed basePath routing
  • #​8467: feat(api-reference): improve Ask AI button consistency and a11y
  • #​8409: feat: lazy rendering
  • #​8442: fix object schema descriptions in parameter rendering

postcss/autoprefixer (autoprefixer)

v10.5.0

Compare Source

• Added mask-position-x and mask-position-y support (by @​toporek).

fastify/fastify (fastify)

v5.8.4

Compare Source

Full Changelog: fastify/fastify@v5.8.3...v5.8.4

v5.8.3

Compare Source

⚠️ Security Release

This fixes CVE CVE-2026-3635 GHSA-444r-cwp2-x5xf.

What's Changed

• docs(readme): add @​Tony133 to plugin team by @​Tony133 in #​6565
• Updated Plugins-Guide.md; Changed "fastify" to "instance" during plugin registration to showcase that it's added as a child by @​kyrylchenko in #​6566
• test: use fastify.test in test case by @​climba03003 in #​6568
• docs: use fastify.example in documentation by @​climba03003 in #​6567
• docs: add common performance degradation guidance by @​maxpetrusenko in #​6520
• docs(server): fix camelCase anchor links in TOC by @​Deepvamja in #​6530
• ci(link-checker): fix root-relative links resolution by @​barba-rossa in #​6535
• docs: update syntax markdown, absolute paths and links by @​Tony133 in #​6569
• docs: clarify content-type parser/schema mismatch is outside threat model by @​mcollina in #​6537
• docs: fix incorrect code examples in Reply and Request reference by @​mahmoodhamdi in #​6582
• docs: replace redirected npm.im http-errors link by @​mcollina in #​6588
• types: Allow port to be null in request type definition by @​TristanBarlow in #​6589
• docs: update links by @​Tony133 in #​6593
• ci(lock-threads): use shared lock-threads workflow by @​Fdawgs in #​6592

New Contributors

• @​kyrylchenko made their first contribution in #​6566
• @​maxpetrusenko made their first contribution in #​6520
• @​Deepvamja made their first contribution in #​6530
• @​barba-rossa made their first contribution in #​6535
• @​mahmoodhamdi made their first contribution in #​6582
• @​TristanBarlow made their first contribution in #​6589

Full Changelog: fastify/fastify@v5.8.2...v5.8.3

facebook/react (react)

v19.2.5: 19.2.5 (April 8th, 2026)

Compare Source

React Server Components

• Add more cycle protections (#​36236 by @​eps1lon and @​unstubbable)

remix-run/react-router (react-router-dom)

v7.14.1

Compare Source

Patch Changes

• Updated dependencies:
  • react-router@7.14.1

v7.14.0

Compare Source

Patch Changes

• Updated dependencies:
  • react-router@7.14.0

v7.13.2

Compare Source

Patch Changes

• Updated dependencies:
  • react-router@7.13.2

nodejs/undici (undici)

v7.25.0

Compare Source

v7.24.8

Compare Source

v7.24.7

Compare Source

What's Changed

• docs: update broken links in file "Dispatcher.md" by @​samuel871211 in #​4924
• doc: remove unused parameter redirectionLimitReached by @​samuel871211 in #​4933
• test: skip flaky macOS Node 20 cookie fetch cases by @​mcollina in #​4932
• fix(types): align Response with DOM fetch types by @​theamodhshetty in #​4867
• fix(types): Fix clone method type declaration to be an instance method rather than instance property by @​mistval in #​4925
• test: skip IPv6 tests when IPv6 is not available by @​mcollina in #​4939
• fix: correctly handle multi-value rawHeaders in fetch by @​mcollina in #​4938
• ignore AGENTS.md by @​mcollina in #​4942

New Contributors

• @​samuel871211 made their first contribution in #​4924
• @​mistval made their first contribution in #​4925

Full Changelog: nodejs/undici@v7.24.6...v7.24.7

v7.24.6

Compare Source

What's Changed

• fix(test): client wasm compatible with clang 22 by @​rozzilla in #​4909
• fix(mock): improve error message when intercepts are exhausted by @​travisbreaks in #​4912
• fix(websocket): support open diagnostics over h2 by @​mcollina in #​4921
• fix: assume http/https scheme for scheme-less proxy env vars by @​travisbreaks in #​4914
• fix(cache): check Authorization on request headers per RFC 9111 §3.5 by @​metalix2 in #​4911
• fix: wrap kConnector call in try/catch to prevent client hang by @​veeceey in #​4834
• docs: clarify fetch and FormData pairing by @​mcollina in #​4922
• fix: support Connection header with connection-specific header names per RFC 7230 by @​mcollina in #​4775
• fix: avoid prototype collisions in parseHeaders by @​mcollina in #​4923
• build(deps-dev): bump typescript from 5.9.3 to 6.0.2 by @​dependabot[bot] in #​4926
• test: auto-init WPT submodule by @​mcollina in #​4930

New Contributors

• @​rozzilla made their first contribution in #​4909
• @​veeceey made their first contribution in #​4834

Full Changelog: nodejs/undici@v7.24.5...v7.24.6

v7.24.5

Compare Source

What's Changed

• Formdata tests by @​KhafraDev in #​4902
• test: add unexpected disconnect guards to more client test files by @​samayer12 in #​4844
• fix(cache): only apply 1-year deleteAt for immutable responses by @​metalix2 in #​4913

New Contributors

• @​metalix2 made their first contribution in #​4913

Full Changelog: nodejs/undici@v7.24.4...v7.24.5

vitejs/vite (vite)

v7.3.2

Compare Source

Please refer to CHANGELOG.md for details.

vitest-dev/vitest (vitest)

v4.1.4

Compare Source

   🚀 Features

• coverage:
  • Default to text reporter skipFull if agent detected  -  by @​hi-ogawa in #​10018 (53757)
• experimental:
  • Expose assertion as a public field  -  by @​sheremet-va in #​10095 (a120e)
  • Support aria snapshot  -  by @​hi-ogawa, Claude Opus 4.6 (1M context), @​AriPerkkio, Codex and @​sheremet-va in #​9668 (d4fbb)
• reporter:
  • Add filterMeta option to json reporter  -  by @​nami8824 and @​sheremet-va in #​10078 (b77de)

   🐞 Bug Fixes

• Use "black" foreground for labeled terminal message to ensure contrast  -  by @​hi-ogawa in #​10076 (203f0)
• Make expect(..., message) consistent as error message prefix  -  by @​hi-ogawa and Codex in #​10068 (a1b5f)
• Do not hoist imports whose names match class properties .  -  by @​SunsetFi in #​10093 and #​10094 (0fc4b)
• browser: Spread user server options into browser Vite server in project  -  by @​GoldStrikeArch in #​10049 (65c9d)

    View changes on GitHub

v4.1.3

Compare Source

   🚀 Experimental Features

• Add experimental.preParse flag  -  by @​sheremet-va in #​10070 (78273)
• Support browser.locators.exact option  -  by @​sheremet-va in #​10013 (48799)
• Add TestAttachment.bodyEncoding  -  by @​hi-ogawa in #​9969 (89ca0)
• Support custom snapshot matcher  -  by @​hi-ogawa, Claude Sonnet 4.6 and Codex in #​9973 (59b0e)

   🐞 Bug Fixes

• Advance fake timers with expect.poll interval  -  by @​hi-ogawa and Claude Sonnet 4.6 in #​10022 (3f5bf)
• Add @vitest/coverage-v8 and @vitest/coverage-istanbul as optional dependency  -  by @​alan-agius4 in #​10025 (146d4)
• Fix defineHelper for webkit async stack trace + update playwright 1.59.0  -  by @​hi-ogawa in #​10036 (5a5fa)
• Fix suite hook throwing errors for unused auto test-scoped fixture  -  by @​hi-ogawa and Claude Sonnet 4.6 in #​10035 (39865)
• expect:
  • Remove JestExtendError.context from verbose error reporting  -  by @​hi-ogawa in #​9983 (66751)
  • Don't leak "runner" types  -  by @​sheremet-va in #​10004 (ec204)
• snapshot:
  • Fix flagging obsolete snapshots for snapshot properties mismatch  -  by @​hi-ogawa and Claude Sonnet 4.6 in #​9986 (6b869)
  • Export custom snapshot matcher helper from vitest  -  by @​hi-ogawa and Codex in #​10042 (691d3)
• ui:
  • Don't leak vite types  -  by @​sheremet-va in #​10005 (fdff1)
• vm:
  • Fix external module resolve error with deps optimizer query  -  by @​hi-ogawa and Claude Sonnet 4.6 in #​10024 (9dbf4)

    View changes on GitHub

v4.1.2

Compare Source

This release bumps Vitest's flatted version and removes version pinning to resolve flatted's CVE related issues (#​9975).

   🐞 Bug Fixes

• Don't resolve setupFiles from parent directory  -  by @​hi-ogawa in #​9960 (7aa93)
• Ensure sequential mock/unmock resolution  -  by @​hi-ogawa and Claude Opus 4.6 in #​9830 (7c065)
• browser: Take failure screenshot if toMatchScreenshot can't capture a stable screenshot  -  by @​macarie in #​9847 (faace)
• coverage: Correct coverageConfigDefaults values and types  -  by @​Arthie in #​9940 (b3c99)
• pretty-format: Fix output limit over counting  -  by @​hi-ogawa in #​9965 (d3b7a)
• Disable colors if agent is detected  -  by @​sheremet-va and @​AriPerkkio in #​9851 (6f97b)

    View changes on GitHub

v4.1.1

Compare Source

   🚀 Features

• experimental:
  • Expose matchesTagsFilter to test if the current filter matches tags  -  by @​sheremet-va in #​9913 (eec53)
  • Introduce experimental.vcsProvider  -  by @​sheremet-va in #​9928 (56115)

   🐞 Bug Fixes

• Mark TestProject.testFilesList internal properly  -  by @​sapphi-red in #​9867 (54f26)
• Detect fixture that returns without calling use  -  by @​oilater in #​9831 and #​9861 (633ae)
• Drop vite 8.beta support  -  by @​AriPerkkio in #​9862 (b78f5)
• Type regression in vi.mocked() static class methods  -  by @​purepear and @​hi-ogawa in #​9857 (90926)
• Properly re-evaluate actual modules of mocked external  -  by @​hi-ogawa in #​9898 (ae5ec)
• Preserve coverage report when html reporter overlaps  -  by @​hi-ogawa in #​9889 (2d81a)
• Provide vi.advanceTimers to the preview provider  -  by @​sheremet-va in #​9891 (1bc3e)
• Don't leak event listener in playwright provider  -  by @​sheremet-va in #​9910 (d9355)
• Open browser in --standalone mode without running tests  -  by @​sheremet-va in #​9911 (e78ad)
• Guard disposable and optional body  -  by @​sheremet-va in #​9912 (6fdb2)
• Resolve retry.condition RegExp serialization issue  -  by @​nstepien and @​hi-ogawa in #​9942 (7b605)
• collect:
  • Don't treat extra props on test return as tests  -  by @​sheremet-va in #​9871 (141e7)
• coverage:
  • Simplify provider types  -  by @​AriPerkkio in #​9931 (aaf9f)
  • Load built-in provider without module runner  -  by @​AriPerkkio in #​9939 [(bf892)](https://redirect.github.com/vitest-dev/vi

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.