chore(deps): update all non-major dependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence	Type	Update	Pending
@commitlint/cli (source)	20.4.1 → 20.4.2			devDependencies	patch
@commitlint/config-conventional (source)	20.4.1 → 20.4.2			devDependencies	patch
@datadog/browser-rum (source)	6.27.1 → 6.28.1			dependencies	minor
@datadog/browser-rum-react (source)	6.27.1 → 6.28.1			dependencies	minor
@stripe/stripe-js (source)	8.7.0 → 8.8.0			dependencies	minor
@tailwindcss/vite (source)	4.1.18 → 4.2.1			dependencies	minor
@types/node (source)	24.10.13 → 24.10.15			dependencies	patch	24.11.0
axios (source)	1.13.5 → 1.13.6			dependencies	patch
jsdom	28.0.0 → 28.1.0			devDependencies	minor
node (source)	24.13.1 → 24.14.0				minor
oxlint (source)	1.47.0 → 1.50.0			devDependencies	minor	1.51.0
pnpm (source)	10.29.3+sha512.498e1fb4cca5aa06c1dcf2611e6fafc50972ffe7189998c409e90de74566444298ffe43e6cd2acdc775ba1aa7cc5e092a8b7054c811ba8c5770f84693d33d2dc → 10.30.3			packageManager	minor
react-hook-form (source)	7.71.1 → 7.71.2			dependencies	patch
swagger-ui-react	5.31.0 → 5.32.0			dependencies	minor
tailwind-merge	3.4.0 → 3.5.0			dependencies	minor
tailwindcss (source)	4.1.18 → 4.2.1			dependencies	minor

---

Release Notes

conventional-changelog/commitlint (@​commitlint/cli)

v20.4.2

Compare Source

Note: Version bump only for package @​commitlint/cli

conventional-changelog/commitlint (@​commitlint/config-conventional)

v20.4.2

Compare Source

Note: Version bump only for package @​commitlint/config-conventional

DataDog/browser-sdk (@​datadog/browser-rum)

v6.28.1

Compare Source

Public Changes:

• 🐛 Compute duration from timestamps in event tracker (#​4233) [RUM] [RUM-REACT] [RUM-SLIM]
• 🐛 [RUM Profiler] Fix stateReason not updated on stop and cleanup tasks accumulation (#​4171) [RUM]

Internal Changes:

• 👷 Update all non-major dependencies (#​4186) [FLAGGING] [LOGS] [RUM] [RUM-REACT] [RUM-SLIM] [WORKER]
• 👷 Update dependency eslint-plugin-unicorn to v63 (#​4221)
• 👷 Update dependency @​playwright/test to v1.58.2 (#​4187)
• ⚗️ [RUM-13259] Add shadow DOM support for action selectors (#​4097) [RUM] [RUM-REACT] [RUM-SLIM]

v6.28.0

Compare Source

Public Changes:

• ✨ localStorage strategy for remote configuration (#​4071) [RUM] [RUM-REACT] [RUM-SLIM]
• ✨ [RUM-13680] Add support for GraphQL GET requests with query params (APQ) (#​4125) [RUM] [RUM-REACT] [RUM-SLIM]
• 🐛 Regenerate anonymousId when session cookie is altered without preserving aid (#​4203) [FLAGGING] [LOGS] [RUM] [RUM-REACT] [RUM-SLIM] [WORKER]
• 🐛 [RUM-5645] Avoid fetch keepAlive (#​4192) [FLAGGING] [LOGS] [RUM] [RUM-REACT] [RUM-SLIM] [WORKER]
• ⚡️ rebuild worker only when needed (#​4170)
• 📝 Add critical patterns documentation to AGENTS.md (#​4183)
• ⚗ [RUM-11393] Add Start/StopResource API (#​4110) [FLAGGING] [LOGS] [RUM] [RUM-REACT] [RUM-SLIM] [WORKER]

Internal Changes:

• 👷 Skip BrowserStack tests on next major branch (#​4215)
• 👷 use dynamic port for dev server to avoid conflicts (#​4218)
• 👷 Load BrowserStack credentials from .env file (#​4189)
• 👷 Skip check-staging-merge for PRs targeting next major version branch (#​4181)
• 🔧 disable ADMS (#​4191)
• ✅ fix mockCookies flaky interception on Safari 12.1.2 (#​4214) [FLAGGING] [LOGS] [RUM] [RUM-REACT] [RUM-SLIM] [WORKER]
• ✅ Fix flaky remote configuration E2E tests (#​4210)
• ✅ fix flaky tests related to experimental features (#​4207) [FLAGGING] [LOGS] [RUM] [RUM-REACT] [RUM-SLIM] [WORKER]
• ✅ Introduce a new way to mock values in unit tests (#​4129) [FLAGGING] [LOGS] [RUM] [RUM-REACT] [RUM-SLIM] [WORKER]
• ♻️ [PANA-5982] Make the serialization code more configurable and testable (#​4185) [RUM]
• ♻️ move long task contexts to profiler (#​4046) [RUM] [RUM-REACT] [RUM-SLIM]
• [RUM/PROF] Add profiling context to actions and vitals' _dd field (#​4200) [RUM]
• ♻️ [PANA-5948] Make some small improvements to ItemId management (#​4164) [RUM]
• ♻️ Refactor e2e service worker setup into a composable builder pattern (#​4162)

stripe/stripe-js (@​stripe/stripe-js)

v8.8.0

Compare Source

Fixes

• add confirmAmazonPaySetup to the types (#​874)
• Add optional savePaymentMethod property to value (#​873)
• publish: preflight hub auth before tagging (#​866)

Changed

• Update Payment Form types (#​875)
• Add Enums to options.layout.radios (#​868)
• Use more specific types for tax ID (#​872)
• Add lk_vat to tax id types (#​871)
• add paymentFormConfirmEvent to confirm args type (#​867)
• Bump lodash from 4.17.21 to 4.17.23 in /examples/rollup (#​858)

tailwindlabs/tailwindcss (@​tailwindcss/vite)

v4.2.1

Compare Source

Fixed

• Allow trailing dash in functional utility names for backwards compatibility (#​19696)
• Properly detect classes containing . characters within curly braces in MDX files (#​19711)

v4.2.0

Compare Source

Added

• Add mauve, olive, mist, and taupe color palettes to the default theme (#​19627)
• Add @tailwindcss/webpack package to run Tailwind CSS as a webpack plugin (#​19610)
• Add pbs-* and pbe-* utilities for padding-block-start and padding-block-end (#​19601)
• Add mbs-* and mbe-* utilities for margin-block-start and margin-block-end (#​19601)
• Add scroll-pbs-* and scroll-pbe-* utilities for scroll-padding-block-start and scroll-padding-block-end (#​19601)
• Add scroll-mbs-* and scroll-mbe-* utilities for scroll-margin-block-start and scroll-margin-block-end (#​19601)
• Add border-bs-* and border-be-* utilities for border-block-start and border-block-end (#​19601)
• Add inline-*, min-inline-*, max-inline-* utilities for inline-size, min-inline-size, and max-inline-size (#​19612)
• Add block-*, min-block-*, max-block-* utilities for block-size, min-block-size, and max-block-size (#​19612)
• Add inset-s-*, inset-e-*, inset-bs-*, inset-be-* utilities for inset-inline-start, inset-inline-end, inset-block-start, and inset-block-end (#​19613)
• Add font-features-* utility for font-feature-settings (#​19623)

Fixed

• Prevent double @supports wrapper for color-mix values (#​19450)
• Allow whitespace around @source inline() argument (#​19461)
• Emit comment when source maps are saved to files when using @tailwindcss/cli (#​19447)
• Detect utilities containing capital letters followed by numbers (#​19465)
• Fix class extraction for Rails' strict locals (#​19525)
• Align @utility name validation with Oxide scanner rules (#​19524)
• Fix infinite loop when using @variant inside @custom-variant (#​19633)
• Allow multiples of .25 in aspect-* fractions (e.g. aspect-8.5/11) (#​19688)
• Ensure changes to external files listed via @source trigger a full page reload when using @tailwindcss/vite (#​19670)
• Improve performance of Oxide scanner in bigger projects by reducing file system walks (#​19632)
• Ensure import aliases in Astro v5 work without crashing when using @tailwindcss/vite (#​19677)
• Allow escape characters in @utility names to improve support with formatters such as Biome (#​19626)
• Fix incorrect canonicalization results when canonicalizing multiple times (#​19675)
• Add .jj to default ignored content directories (#​19687)

Deprecated

• Deprecate start-* and end-* utilities in favor of inset-s-* and inset-e-* utilities (#​19613)

axios/axios (axios)

v1.13.6

Compare Source

This release focuses on platform compatibility, error handling improvements, and code quality maintenance.

⚠️ Important Changes

• Breaking Changes: None identified in this release.
• Action Required: Users targeting React Native should verify their integration, particularly if relying on specific Blob or FormData behaviours, as improvements have been made to support these objects.

🚀 New Features

• React Native Blob Support: Axios now includes support for React Native Blob objects. Thanks to @​moh3n9595 for the initial implementation. (#​5764)
• Code Quality: Implemented prettier across the codebase and resolved associated formatting issues. (#​7385)

🐛 Bug Fixes

• Environment Compatibility:

  • Fixed module exports for React Native and Browserify environments. (#​7386)
  • Added safe FormData detection for the WeChat Mini Program environment. (#​7324)

• Error Handling:

  • AxiosError.message is now correctly enumerable. (#​7392)
  • AxiosError.from now correctly copies the status property from the source error, ensuring better error propagation. (#​7403)

🔧 Maintenance & Chores

• Dependencies: Updated the development_dependencies group (5 updates). (#​7432)
• Infrastructure: Migrated @​rollup/plugin-babel from v5.3.1 to v6.1.0. (#​7424)
• Documentation: Added missing JSDoc comments to utilities. (#​7427)

🌟 New Contributors

We are thrilled to welcome our new contributors! Thank you for helping improve the project:

• @​Gudahtt (#​7386)
• @​ybbus (#​7392)
• @​Shiwaangee (#​7324)
• @​skrtheboss (#​7403)
• @​Janaka66 (#​7427)
• @​moh3n9595 (#​5764)
• @​digital-wizard48 (#​7424)

Full Changelog: v1.13.5...v1.13.6

jsdom/jsdom (jsdom)

v28.1.0

Compare Source

• Added blob.text(), blob.arrayBuffer(), and blob.bytes() methods.
• Improved getComputedStyle() to account for CSS specificity when multiple rules apply. (asamuzaK)
• Improved synchronous XMLHttpRequest performance by using a persistent worker thread, avoiding ~400ms of setup overhead on every synchronous request after the first one.
• Improved performance of node.getRootNode(), node.isConnected, and event.dispatchEvent() by caching the root node of document-connected trees.
• Fixed getComputedStyle() to correctly handle !important priority. (asamuzaK)
• Fixed document.getElementById() to return the first element in tree order when multiple elements share the same ID.
• Fixed <svg> elements to no longer incorrectly proxy event handlers to the Window.
• Fixed FileReader event timing and fileReader.result state to more closely follow the spec.
• Fixed a potential hang when synchronous XMLHttpRequest encountered dispatch errors.
• Fixed compatibility with environments where Node.js's built-in fetch() has been used before importing jsdom, by working around undici v6/v7 incompatibilities.

nodejs/node (node)

v24.14.0

Compare Source

oxc-project/oxc (oxlint)

v1.50.0

Compare Source

v1.49.0

Compare Source

v1.48.0

Compare Source

pnpm/pnpm (pnpm)

v10.30.3

Compare Source

v10.30.2

Compare Source

v10.30.1: pnpm 10.30.1

Compare Source

Patch Changes

• Use the /-/npm/v1/security/audits/quick endpoint as the primary audit endpoint, falling back to /-/npm/v1/security/audits when it fails #​10649.

Platinum Sponsors

Gold Sponsors

v10.30.0: pnpm 10.30

Compare Source

Minor Changes

• pnpm why now shows a reverse dependency tree. The searched package appears at the root with its dependents as branches, walking back to workspace roots. This replaces the previous forward-tree output which was noisy and hard to read for deeply nested dependencies.

Patch Changes

• Revert pnpm why dependency pruning to prefer correctness over memory consumption. Reverted PR: #​7122.
• Optimize pnpm why and pnpm list performance in workspaces with many importers by sharing the dependency graph and materialization cache across all importers instead of rebuilding them independently for each one #​10596.

Platinum Sponsors

Gold Sponsors

react-hook-form/react-hook-form (react-hook-form)

v7.71.2: Version 7.71.2

Compare Source

🕵️‍♂️ fix: use DeepPartialSkipArrayKey for WatchObserver value parameter (#​13278)
🧹 fix(clearErrors): emit name signal for targeted field updates (#​13280)

thanks to @​veeceey, @​kaigritun, @​pgoslatara & @​seongbiny

swagger-api/swagger-ui (swagger-ui-react)

v5.32.0

Compare Source

Features

• oas32: add basic OpenAPI 3.2.0 support (#​10721) (4675ad7)

v5.31.2

Compare Source

Bug Fixes

• core: remove mistakenly put condition (#​10212) (#​10730) (62525f9)
• deps: update swagger-client to v3.36.2 to resolve peer dep issue (#​10734) (707010a)

Performance Improvements

• reduce conversion from immutablejs to plain js objects (#​10682) (ae79054)

v5.31.1

Compare Source

Bug Fixes

• deps: align the tree-sitter version (#​10694) (6453290)
• deps: update vulnerable dependencies (#​10725) (23d6c26)
• utils: disallow schema type array value string (#​10691) (e87ecd7)
• validated support for OpenAPI 3.1.2 and updated docs (8bf8ed9)

Reverts

• Revert "fix(utils): disallow schema type array value string (#​10691)" (#​10710) (0a7ff5b)

dcastil/tailwind-merge (tailwind-merge)

v3.5.0

Compare Source

New Features

• Add support for Tailwind CSS v4.2 by @​dcastil in #​651

Full Changelog: dcastil/tailwind-merge@v3.4.1...v3.5.0

Thanks to @​brandonmcconnell, @​manavm1990, @​langy, @​roboflow, @​syntaxfm, @​getsentry, @​codecov, a private sponsor, @​block, @​openclaw, @​sourcegraph and more via @​thnxdev for sponsoring tailwind-merge! ❤️

v3.4.1

Compare Source

Bug Fixes

• Prevent arbitrary font-family and font-weight from merging by @​roneymoon in #​635

Full Changelog: dcastil/tailwind-merge@v3.4.0...v3.4.1

Thanks to @​brandonmcconnell, @​manavm1990, @​langy, @​roboflow, @​syntaxfm, @​getsentry, @​codecov, a private sponsor, @​block, @​openclaw, @​sourcegraph and more via @​thnxdev for sponsoring tailwind-merge! ❤️

---

Configuration

📅 Schedule: Branch creation - "before 9am on Monday" in timezone America/New_York, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.