chore(deps): Update all non-major dependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence	Type	Update
@types/pg (source)	8.16.0 → 8.18.0			devDependencies	minor
eslint (source)	9.39.3 → 9.39.4			devDependencies	patch
supabase/postgres	15.14.1.091 → 15.14.1.095				patch
turbo (source)	2.8.12 → 2.8.14			devDependencies	patch

---

Release Notes

eslint/eslint (eslint)

v9.39.4

Compare Source

Bug Fixes

• f18f6c8 fix: update dependency minimatch to ^3.1.5 (#​20564) (Milos Djermanovic)
• a3c868f fix: update dependency @​eslint/eslintrc to ^3.3.4 (#​20554) (Milos Djermanovic)
• 234d005 fix: minimatch security vulnerability patch for v9.x (#​20549) (Andrej Beles)
• b1b37ee fix: update ajv to 6.14.0 to address security vulnerabilities (#​20538) (루밀LuMir)

Documentation

• 4675152 docs: add deprecation notice partial (#​20520) (Milos Djermanovic)

Chores

• b8b4eb1 chore: update dependencies for ESLint v9.39.4 (#​20596) (Francesco Trotta)
• 71b2f6b chore: package.json update for @​eslint/js release (Jenkins)
• 1d16c2f ci: pin Node.js 25.6.1 (#​20563) (Milos Djermanovic)

vercel/turborepo (turbo)

v2.8.14

Compare Source

v2.8.13: Turborepo v2.8.13

Compare Source

What's Changed

@​turbo/repository

• feat: Add experimentalObservability with an OTel backend by @​bkonkle in #​11130
• release(library): 0.0.1-canary.20 by @​github-actions[bot] in #​12116

Examples

• feat: Add with-otel example with pre-configured Grafana dashboard by @​anthonyshew in #​12043
• examples: Upgrade with-react-native-web example to use latest versions by @​serjooo in #​12085
• fix: Duplicate /signup? in Vercel URL by @​04cb in #​12088
• examples: Fix markdown links inside code blocks in basic README by @​sleitor in #​11946

Changelog

• fix: Suppress npm upgrade notices in integration tests and consolidate test helpers by @​anthonyshew in #​12036
• fix: Replace flaky pnpx symlink-dir with native NTFS junctions in find-turbo test by @​anthonyshew in #​12039
• fix: Prevent corepack download prompt from hanging prysk tests on Windows by @​anthonyshew in #​12041
• fix: Send OTEL metrics without requiring --summarize flag by @​anthonyshew in #​12042
• docs: Fix incorrect otel future flag bypass claim by @​anthonyshew in #​12047
• fix: Address root causes of 9 flaky tests and remove retry workarounds by @​anthonyshew in #​12045
• test: Port 6 prysk CLI tests to pure Rust by @​anthonyshew in #​12048
• docs: Fix experimentalObservability config reference by @​bkonkle in #​12052
• test: Port 10 more prysk tests to pure Rust by @​anthonyshew in #​12051
• test: Port 14 more prysk tests to Rust (single-package + commands) by @​anthonyshew in #​12054
• test: Port 13 more prysk tests to Rust by @​anthonyshew in #​12057
• fix: Exclude peer dependencies from workspace external dep resolution by @​anthonyshew in #​12050
• test: Port all 15 workspace-configs prysk tests to Rust by @​anthonyshew in #​12058
• perf: Stream file contents during hashing to lower memory usage by @​anthonyshew in #​12059
• fix: Treat npm: alias dependencies as external, not workspace references by @​anthonyshew in #​12061
• test: Port 18 more prysk tests to Rust (other/ + lockfile-aware-caching/) by @​anthonyshew in #​12062
• fix: Preserve file: protocol entries in pruned yarn v1 lockfile by @​anthonyshew in #​12064
• perf: Use stack-allocated OidHash in FileHashes and skip expanded hashes on normal runs by @​anthonyshew in #​12065
• test: Port all 8 find-turbo prysk tests to Rust by @​anthonyshew in #​12066
• fix: Support pnpm per-workspace lockfiles in turbo prune by @​anthonyshew in #​12067
• test: Port final 2 prysk tests to Rust (100% complete) by @​anthonyshew in #​12068
• fix: Resolve Berry prune failure when resolutions contain patch overrides by @​anthonyshew in #​12069
• test: Add lockfile fixture for yarn berry resolution pruning (issue #​2791) by @​anthonyshew in #​12071
• refactor: Clean up test infrastructure and eliminate duplication by @​anthonyshew in #​12072
• fix: Retain injected workspace package entries during pnpm lockfile pruning by @​anthonyshew in #​12073
• refactor: Clean up test infrastructure + improve test quality by @​anthonyshew in #​12074
• perf: Speed up lockfile test suite by @​anthonyshew in #​12078
• fix: Preserve file: and link: protocol entries in pruned bun lockfile by @​anthonyshew in #​12076
• fix: Stop running unnecessary npm install in engines tests by @​anthonyshew in #​12081
• test: Add lockfile fixture for pnpm v9 injected workspace deps (issue #​8243) by @​anthonyshew in #​12082
• fix: Filter orphaned Yarn packageExtensions entries during lockfile pruning by @​anthonyshew in #​12084
• fix: Align experimentalObservability on object maps rather than arrays by @​bkonkle in #​12089
• fix: Prevent yarn integration tests from hanging on corepack prompts by @​anthonyshew in #​12090
• fix: Prevent turbo dev from hanging when daemon file watching fails by @​anthonyshew in #​12091
• perf: Optimize npm lockfile parser by @​anthonyshew in #​12093
• chore: Trim unused dependency features for faster compilation by @​anthonyshew in #​12094
• fix: Prevent lockfile-aware yarn test from hanging on corepack downloads by @​anthonyshew in #​12095
• perf: Eliminate per-directory stat syscalls in untracked file detection by @​anthonyshew in #​12096
• perf: Reduce allocations in file hash computation by @​anthonyshew in #​12102
• perf: Replace SWC with oxc for JS/TS parsing by @​anthonyshew in #​12098
• fix: Pre-warm corepack cache to prevent yarn/pnpm tests from hanging by @​anthonyshew in #​12099
• perf: Disable unused zstd default features to reduce C compilation by @​anthonyshew in #​12107
• perf: Replace git subprocess in worktree detection with Rust by @​anthonyshew in #​12106
• test: Add turbo watch tests and refactor file change classification by @​anthonyshew in #​12119
• fix(frameworks): Also check devDependencies when inferring framework in single-package mode by @​sleitor in #​12056
• test: Add boundary tests for framework inference devDependencies support by @​anthonyshew in #​12122
• fix: Stabilize flaky watch_file_change_reruns_affected_package test by @​anthonyshew in #​12123
• fix: Microfrontends merges with into root config instead of replacing it by @​anthonyshew in #​12125
• fix: Omit None otel fields during turbo prune serialization by @​bkonkle in #​12126
• fix: Correct dependency iteration order so dependencies takes precedence over devDependencies by @​anthonyshew in #​12129

New Contributors

• @​bkonkle made their first contribution in #​11130
• @​serjooo made their first contribution in #​12085
• @​04cb made their first contribution in #​12088
• @​sleitor made their first contribution in #​11946

Full Changelog: vercel/turborepo@v2.8.12...v2.8.13

---

Configuration

📅 Schedule: Branch creation - "before 3am on Monday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[github-actions]

🎉 This PR is included in version 1.14.15 🎉

The release is available on GitHub release

Your semantic-release bot 📦🚀