fix(deps): update non-major dependencies

[renovate-wenisch-tech]

This PR contains the following updates:

Package	Change	Age	Confidence	Type	Update
alpinejs (source)	3.17.1 → 3.17.3			dependencies	patch
ghcr.io/wenisch-tech/contextcrate (source)	0.9.5 → 0.9.6				patch
mcr.microsoft.com/playwright/java	v1.62.0-noble → v1.63.0-noble			final	minor

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

alpinejs/alpine (alpinejs)

v3.17.3

Compare Source

What's Changed

• Bump js-yaml from 3.14.1 to 3.15.2 by @​dependabot[bot] in #​4896
• Change x-for to allow loops like (foo)in(bar) by @​ColonelThirtyTwo in #​4897
• Fix(CspParser): accept reserved words as property/method names and object keys by @​MaxencePaulin in #​4905
• Fix: $watch and x-modelable can fire after being unwatched/released by @​MaxencePaulin in #​4903
• Fix: skip init() in x-data during clone, matching x-init behavior by @​MaxencePaulin in #​4901
• Bump @​vitest/mocker and vitest by @​dependabot[bot] in #​4898
• Stop x-on and x-model's own modifiers from being read as key names by @​dylanpulver in #​4891
• Fix CI compatibility after the Vitest 5 upgrade by @​calebporzio in #​4906

New Contributors

• @​ColonelThirtyTwo made their first contribution in #​4897
• @​MaxencePaulin made their first contribution in #​4905
• @​dylanpulver made their first contribution in #​4891

Full Changelog: alpinejs/alpine@v3.17.2...v3.17.3

v3.17.2

Compare Source

What's Changed

• Fix decode-uri-component Dependabot alert by @​calebporzio in #​4889
• Bump browserslist from 4.21.5 to 4.28.8 by @​dependabot[bot] in #​4890
• Fix CSP initialization in sandboxed iframes by @​calebporzio in #​4893

Full Changelog: alpinejs/alpine@v3.17.1...v3.17.2

wenisch-tech/ContextCrate (ghcr.io/wenisch-tech/contextcrate)

v0.9.6

Compare Source

What's Changed

• fix(deps): update non-major dependencies by @​renovate-wenisch-tech[bot] in #​20

Full Changelog: v0.9.5...v0.9.6

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate.

[github-actions]

Trivy vulnerability report

Image: ghcr.io/wenisch-tech/contextcrate:0.9.7-pr.29.317

Report Summary

┌────────────────────────────────────────────────────────────────────┬───────┬─────────────────┐
│                               Target                               │ Type  │ Vulnerabilities │
├────────────────────────────────────────────────────────────────────┼───────┼─────────────────┤
│ ghcr.io/wenisch-tech/contextcrate:0.9.7-pr.29.317 (wolfi 20230201) │ wolfi │        0        │
├────────────────────────────────────────────────────────────────────┼───────┼─────────────────┤
│ app/app.jar                                                        │  jar  │        0        │
└────────────────────────────────────────────────────────────────────┴───────┴─────────────────┘
Legend:
- '-': Not scanned
- '0': Clean (no security findings detected)

[github-actions]

Trivy vulnerability report

Image: ghcr.io/wenisch-tech/contextcrate:0.9.7-pr.29.333

Report Summary

┌────────────────────────────────────────────────────────────────────┬───────┬─────────────────┐
│                               Target                               │ Type  │ Vulnerabilities │
├────────────────────────────────────────────────────────────────────┼───────┼─────────────────┤
│ ghcr.io/wenisch-tech/contextcrate:0.9.7-pr.29.333 (wolfi 20230201) │ wolfi │        0        │
├────────────────────────────────────────────────────────────────────┼───────┼─────────────────┤
│ app/app.jar                                                        │  jar  │        0        │
└────────────────────────────────────────────────────────────────────┴───────┴─────────────────┘
Legend:
- '-': Not scanned
- '0': Clean (no security findings detected)

[github-actions]

Trivy vulnerability report

Image: ghcr.io/wenisch-tech/contextcrate:0.9.7-pr.29.353

Report Summary

┌────────────────────────────────────────────────────────────────────┬───────┬─────────────────┐
│                               Target                               │ Type  │ Vulnerabilities │
├────────────────────────────────────────────────────────────────────┼───────┼─────────────────┤
│ ghcr.io/wenisch-tech/contextcrate:0.9.7-pr.29.353 (wolfi 20230201) │ wolfi │        1        │
├────────────────────────────────────────────────────────────────────┼───────┼─────────────────┤
│ app/app.jar                                                        │  jar  │        0        │
└────────────────────────────────────────────────────────────────────┴───────┴─────────────────┘
Legend:
- '-': Not scanned
- '0': Clean (no security findings detected)


For OSS Maintainers: VEX Notice
--------------------------------
If you're an OSS maintainer and Trivy has detected vulnerabilities in your project that you believe are not actually exploitable, consider issuing a VEX (Vulnerability Exploitability eXchange) statement.
VEX allows you to communicate the actual status of vulnerabilities in your project, improving security transparency and reducing false positives for your users.
Learn more and start using VEX: https://trivy.dev/docs/v0.74/guide/supply-chain/vex/repo#publishing-vex-documents

To disable this notice, set the TRIVY_DISABLE_VEX_NOTICE environment variable.


ghcr.io/wenisch-tech/contextcrate:0.9.7-pr.29.353 (wolfi 20230201)
==================================================================
Total: 1 (MEDIUM: 1, HIGH: 0, CRITICAL: 0)

┌─────────┬────────────────┬──────────┬────────┬───────────────────┬───────────────┬───────────────────────────────────────────────────────────┐
│ Library │ Vulnerability  │ Severity │ Status │ Installed Version │ Fixed Version │                           Title                           │
├─────────┼────────────────┼──────────┼────────┼───────────────────┼───────────────┼───────────────────────────────────────────────────────────┤
│ zlib    │ CVE-2026-85091 │ MEDIUM   │ fixed  │ 1.3.2-r7          │ 1.3.3-r0      │ zlib versions 1.3.1.2 through 1.3.2 contain a heap buffer │
│         │                │          │        │                   │               │ overflow vul ......                                       │
│         │                │          │        │                   │               │ https://avd.aquasec.com/nvd/cve-2026-85091                │
└─────────┴────────────────┴──────────┴────────┴───────────────────┴───────────────┴───────────────────────────────────────────────────────────┘

[github-actions]

Trivy vulnerability report

Image: ghcr.io/wenisch-tech/contextcrate:0.9.7-pr.29.359

Report Summary

┌────────────────────────────────────────────────────────────────────┬───────┬─────────────────┐
│                               Target                               │ Type  │ Vulnerabilities │
├────────────────────────────────────────────────────────────────────┼───────┼─────────────────┤
│ ghcr.io/wenisch-tech/contextcrate:0.9.7-pr.29.359 (wolfi 20230201) │ wolfi │        0        │
├────────────────────────────────────────────────────────────────────┼───────┼─────────────────┤
│ app/app.jar                                                        │  jar  │        0        │
└────────────────────────────────────────────────────────────────────┴───────┴─────────────────┘
Legend:
- '-': Not scanned
- '0': Clean (no security findings detected)