fix(deps): update likely non breaking dependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
@iconify/json (source)	2.2.394 -> 2.2.397
@mantine/core (source)	8.3.4 -> 8.3.5
@mantine/dates (source)	8.3.4 -> 8.3.5
@mantine/form (source)	8.3.4 -> 8.3.5
@mantine/hooks (source)	8.3.4 -> 8.3.5
@mantine/modals (source)	8.3.4 -> 8.3.5
@mantine/notifications (source)	8.3.4 -> 8.3.5
@mikro-orm/cli (source)	6.5.7 -> 6.5.8
@mikro-orm/core (source)	6.5.7 -> 6.5.8
@mikro-orm/migrations (source)	6.5.7 -> 6.5.8
@mikro-orm/postgresql (source)	6.5.7 -> 6.5.8
@mikro-orm/reflection (source)	6.5.7 -> 6.5.8
@mikro-orm/seeder (source)	6.5.7 -> 6.5.8
@nestjs/swagger	11.2.0 -> 11.2.1
@nx-tools/container-metadata (source)	6.9.0 -> 6.9.1
@nx-tools/nx-container (source)	6.9.0 -> 6.9.1
@tanstack/react-query (source)	5.90.2 -> 5.90.5
@types/react-dom (source)	19.2.1 -> 19.2.2
@typescript-eslint/parser (source)	8.46.0 -> 8.46.1
astro (source)	5.14.4 -> 5.14.6
jsdom	27.0.0 -> 27.0.1
nx (source)	21.6.4 -> 21.6.5
pnpm (source)	10.18.2 -> 10.18.3
typescript-eslint (source)	8.46.0 -> 8.46.1
vite (source)	7.1.9 -> 7.1.11

---

Release Notes

iconify/icon-sets (@​iconify/json)

v2.2.397

Compare Source

v2.2.396

Compare Source

v2.2.395

Compare Source

mantinedev/mantine (@​mantine/core)

v8.3.5

Compare Source

What's Changed

• [@mantine/code-highlight] Add option to load custom shiki themes (#​8356)
• [@mantine/form] Export more types (#​8357)
• [@mantine/hooks] use-local-storage: Fix value not resetting to the default value when value is cleared from the local storage (#​8361)
• [@mantine/core] Checkbox: Fix incorrect data-indeterminate attribute removal on state change (#​8363)
• [@mantine/core] Alert: Fix invalid aria-describedby and arialabelled-by if title or children props are not used (#​8345)

New Contributors

• @​chlee1001 made their first contribution in #​8363
• @​snelsi made their first contribution in #​8361
• @​keshane made their first contribution in #​8357
• @​onurcancamci made their first contribution in #​8356

Full Changelog: mantinedev/mantine@8.3.4...8.3.5

mikro-orm/mikro-orm (@​mikro-orm/cli)

v6.5.8

Compare Source

Bug Fixes

• core: don't skip diffing of non-hydrated properties (4a46bd8), closes #​6918
• core: enhance mapToPk() and remove default ref: true in defineEntity helper (#​6919) (f0d4e8e)
• core: improve auto flush detection for STI base classes (da5e993)
• core: rework support for partial loading of embedded properties (29091aa), closes #​6907
• core: support class-based entity definitions with defineEntity (#​6920) (aa7295e), closes /github.com/mikro-orm/mikro-orm/discussions/6865#discussioncomment-14465227
• mongo: support indexes on JSON properties (a9edc05), closes #​6899
• mongo: support upsert with nested onConflictFields on JSON properties (4eab82e), closes #​6900
• query-builder: do not ignore nested joins inside nested joins (a37d6fa)
• schema: fix down migrations with createForeignKeyConstraint property option (23e898b), closes #​6903
• schema: support raw fragments in check constraint expressions (ff360b0), closes #​6914

Features

• core: improve type-level support for composite keys with defineEntity helper (#​6912) (2d39dd0)

nestjs/swagger (@​nestjs/swagger)

v11.2.1

Compare Source

What's Changed

• feat(@​ApiExtension): When used on a controller it applies to all methods by @​drewish in #​3485
• fix: dont serve pet store definiton on api/api by @​kamilmysliwiec in #​3585
• fix(deps): update dependency path-to-regexp to v8.3.0 by @​renovate[bot] in #​3556
• fix(deps): update dependency swagger-ui-dist to v5.29.4 by @​renovate[bot] in #​3458
• fix: missing ApiProperty enum undefined on array handling by @​pvdspek in #​3590
• fix(plugin): correct enum+nullable handling for Enum | null (and ar… by @​AliRaZa1121 in #​3544

New Contributors

• @​pvdspek made their first contribution in #​3590
• @​AliRaZa1121 made their first contribution in #​3544

Full Changelog: nestjs/swagger@11.2.0...11.2.1

gperdomor/nx-tools (@​nx-tools/container-metadata)

v6.9.1

Compare Source

6.9.1 (2025-10-13)

🚀 Features

• publish using trusted publisher (ae54942)

❤️ Thank You

• Gustavo Perdomo

TanStack/query (@​tanstack/react-query)

v5.90.5

Compare Source

Patch Changes

• Updated dependencies [e42ddfe]:
  • @​tanstack/query-core@​5.90.5

v5.90.4

Compare Source

Patch Changes

• Updated dependencies [20ef922]:
  • @​tanstack/query-core@​5.90.4

v5.90.3

Compare Source

Patch Changes

• Avoid unhandled promise rejection errors during de/rehydration of pending queries. (#​9752)

• Updated dependencies [4e1c433]:

  • @​tanstack/query-core@​5.90.3

typescript-eslint/typescript-eslint (@​typescript-eslint/parser)

v8.46.1

Compare Source

This was a version bump only for parser to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

withastro/astro (astro)

v5.14.6

Compare Source

Patch Changes

• #​14562 722bba0 Thanks @​erbierc! - Fixes a bug where the behavior of the "muted" HTML attribute was inconsistent with that of other attributes.

• #​14538 51ebe6a Thanks @​florian-lefebvre! - Improves how Actions are implemented

• #​14548 6cdade4 Thanks @​ascorbic! - Removes support for the maxAge property in cacheHint objects returned by live loaders.

⚠️ Breaking change for experimental live content collections only

Feedback showed that this did not make sense to set at the loader level, since the loader does not know how long each individual entry should be cached for.

If your live loader returns cache hints with maxAge, you need to remove this property:

return {
  entries: [...],
  cacheHint: {
    tags: ['my-tag'],
-   maxAge: 60,
    lastModified: new Date(),
  },
};

The cacheHint object now only supports tags and lastModified properties. If you want to set the max age for a page, you can set the headers manually:

v5.14.5

Compare Source

Patch Changes

• #​14525 4f55781 Thanks @​penx! - Fixes defineLiveCollection() types

• #​14441 62ec8ea Thanks @​upsuper! - Updates redirect handling to be consistent across static and server output, aligning with the behavior of other adapters.

  Previously, the Node.js adapter used default HTML files with meta refresh tags when in static output. This often resulted in an extra flash of the page on redirect, while also not applying the proper status code for redirections. It's also likely less friendly to search engines.

  This update ensures that configured redirects are always handled as HTTP redirects regardless of output mode, and the default HTML files for the redirects are no longer generated in static output. It makes the Node.js adapter more consistent with the other official adapters.

  No change to your project is required to take advantage of this new adapter functionality. It is not expected to cause any breaking changes. However, if you relied on the previous redirecting behavior, you may need to handle your redirects differently now. Otherwise you should notice smoother redirects, with more accurate HTTP status codes, and may potentially see some SEO gains.

• #​14506 ec3cbe1 Thanks @​abdo-spices! - Updates the <Font /> component so that preload links are generated after the style tag, as recommended by capo.js

jsdom/jsdom (jsdom)

v27.0.1

Compare Source

• Fixed some regressions in CSS selectors. Most such regression fixes were done in a minor update of a dependency, and thus available for all fresh installs of v27.0.0. However, one related to class="" attribute changes is only possible with a new version of jsdom. (asamuzaK)

nrwl/nx (nx)

v21.6.5

Compare Source

21.6.5 (2025-10-15)

🚀 Features

• core: expose registerProjectGraphRecomputationListener from daemon client (#​33005)

🩹 Fixes

• core: display bottom corner indicator of tui in progress section correctly (#​32985)
• core: temporarily disable tui for run-one (#​33048)
• core: ensure --help works properly with infix notation (#​32662)
• nx-dev: update nextjs internal-link-checker to include astro urls (#​33045)
• nx-dev: respect NX_DEV_URL in sitemap checker (#​33058)
• nx-dev: handle null github data (#​33061)
• react: dynamic module federation should not initialize remoteUrlDefinitions to empty object (#​33059, #​27927, #​33055, #​27793, #​27842)
• ⚠️ release: ensure multilines in breaking changes are rendered by changelog renderer (#​33070, #​33014)

⚠️ Breaking Changes

• release: The --legacy-peer-deps behavior is no longer forced.

❤️ Thank You

• Caleb Ukle
• Colum Ferry @​Coly010
• Craigory Coppola @​AgentEnder
• Leosvel Pérez Espinosa @​leosvelperez
• MaxKless @​MaxKless

pnpm/pnpm (pnpm)

v10.18.3

Compare Source

Patch Changes

• Fix a bug where pnpm would infinitely recurse when using verifyDepsBeforeInstall: install and pre/post install scripts that called other pnpm scripts #​10060.
• Fixed scoped registry keys (e.g., @scope:registry) being parsed as property paths in pnpm config get when --location=project is used #​9362.
• Remove pnpm-specific CLI options before passing to npm publish to prevent "Unknown cli config" warnings #​9646.
• Fixed EISDIR error when bin field points to a directory #​9441.
• Preserve version and hasBin for variations packages #​10022.
• Fixed pnpm config set --location=project incorrectly handling keys with slashes (auth tokens, registry settings) #​9884.
• When both pnpm-workspace.yaml and .npmrc exist, pnpm config set --location=project now writes to pnpm-workspace.yaml (matching read priority) #​10072.
• Prevent a table width error in pnpm outdated --long #​10040.
• Sync bin links after injected dependencies are updated by build scripts. This ensures that binaries created during build processes are properly linked and accessible to consuming projects #​10057.

typescript-eslint/typescript-eslint (typescript-eslint)

v8.46.1

Compare Source

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

vitejs/vite (vite)

v7.1.11

Compare Source

Bug Fixes

• dev: trim trailing slash before server.fs.deny check (#​20968) (f479cc5)

Miscellaneous Chores

• deps: update all non-major dependencies (#​20966) (6fb41a2)

Code Refactoring

• use subpath imports for types module reference (#​20921) (d0094af)

Build System

• remove cjs reference in files field (#​20945) (ef411ce)
• remove hash from built filenames (#​20946) (a817307)

v7.1.10

Compare Source

Bug Fixes

• css: avoid duplicate style for server rendered stylesheet link and client inline style during dev (#​20767) (3a92bc7)
• css: respect emitAssets when cssCodeSplit=false (#​20883) (d3e7eee)
• deps: update all non-major dependencies (879de86)
• deps: update all non-major dependencies (#​20894) (3213f90)
• dev: allow aliases starting with // (#​20760) (b95fa2a)
• dev: remove timestamp query consistently (#​20887) (6537d15)
• esbuild: inject esbuild helpers correctly for esbuild 0.25.9+ (#​20906) (446eb38)
• normalize path before calling fileToBuiltUrl (#​20898) (73b6d24)
• preserve original sourcemap file field when combining sourcemaps (#​20926) (c714776)

Documentation

• correct WebSocket spelling (#​20890) (29e98dc)

Miscellaneous Chores

• deps: update rolldown-related dependencies (#​20923) (a5e3b06)

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[changeset-bot]

⚠️ No Changeset found

Latest commit: e8eaef2

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 16.90%. Comparing base (de8ae7c) to head (e8eaef2).
⚠️ Report is 1 commits behind head on main.

Additional details and impacted files

@@           Coverage Diff           @@
##             main     #188   +/-   ##
=======================================
  Coverage   16.90%   16.90%           
=======================================
  Files         132      132           
  Lines        3993     3993           
  Branches      130      136    +6     
=======================================
  Hits          675      675           
  Misses       3258     3258           
  Partials       60       60           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.