chore(deps): update all non-major dependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
@types/node (source)	^22.15.34 -> ^22.16.5
pnpm (source)	10.12.4 -> 10.13.1
vite (source)	^6.2.0 -> ^6.3.5

---

Release Notes

pnpm/pnpm (pnpm)

v10.13.1

Compare Source

Patch Changes

• Run user defined pnpmfiles after pnpmfiles of plugins.

v10.13.0

Compare Source

Minor Changes

• Added the possibility to load multiple pnpmfiles. The pnpmfile setting can now accept a list of pnpmfile locations #​9702.

• pnpm will now automatically load the pnpmfile.cjs file from any config dependency named @pnpm/plugin-* or pnpm-plugin-* #​9729.

  The order in which config dependencies are initialized should not matter — they are initialized in alphabetical order. If a specific order is needed, the paths to the pnpmfile.cjs files in the config dependencies can be explicitly listed using the pnpmfile setting in pnpm-workspace.yaml.

Patch Changes

• When patching dependencies installed via pkg.pr.new, treat them as Git tarball URLs #​9694.
• Prevent conflicts between local projects' config and the global config in dangerouslyAllowAllBuilds, onlyBuiltDependencies, onlyBuiltDependenciesFile, and neverBuiltDependencies #​9628.
• Sort keys in pnpm-workspace.yaml with deep #​9701.
• The pnpm rebuild command should not add pkgs included in ignoredBuiltDependencies to ignoredBuilds in node_modules/.modules.yaml #​9338.
• Replaced shell-quote with shlex for quoting command arguments #​9381.

vitejs/vite (vite)

v6.3.5

Compare Source

• fix(ssr): handle uninitialized export access as undefined (#​19959) (fd38d07), closes #​19959

v6.3.4

Compare Source

• fix: check static serve file inside sirv (#​19965) (c22c43d), closes #​19965
• fix(optimizer): return plain object when using require to import externals in optimized dependenci (efc5eab), closes #​19940
• refactor: remove duplicate plugin context type (#​19935) (d6d01c2), closes #​19935

v6.3.3

Compare Source

• fix: ignore malformed uris in tranform middleware (#​19853) (e4d5201), closes #​19853
• fix(assets): ensure ?no-inline is not included in the asset url in the production environment (#​1949 (16a73c0), closes #​19496
• fix(css): resolve relative imports in sass properly on Windows (#​19920) (ffab442), closes #​19920
• fix(deps): update all non-major dependencies (#​19899) (a4b500e), closes #​19899
• fix(ssr): fix execution order of re-export (#​19841) (ed29dee), closes #​19841
• fix(ssr): fix live binding of default export declaration and hoist exports getter (#​19842) (80a91ff), closes #​19842
• perf: skip sourcemap generation for renderChunk hook of import-analysis-build plugin (#​19921) (55cfd04), closes #​19921
• test(ssr): test ssrTransform re-export deps and test stacktrace with first line (#​19629) (9399cda), closes #​19629

v6.3.2

Compare Source

• fix: match default asserts case insensitive (#​19852) (cbdab1d), closes #​19852
• fix: open first url if host does not match any urls (#​19886) (6abbdce), closes #​19886
• fix(css): respect css.lightningcss option in css minification process (#​19879) (b5055e0), closes #​19879
• fix(deps): update all non-major dependencies (#​19698) (bab4cb9), closes #​19698
• feat(css): improve lightningcss messages (#​19880) (c713f79), closes #​19880

v6.3.1

Compare Source

• fix: avoid using Promise.allSettled in preload function (#​19805) (35c7f35), closes #​19805
• fix: backward compat for internal plugin transform calls (#​19878) (a152b7c), closes #​19878

v6.3.0

Compare Source

• fix(hmr): avoid infinite loop happening with hot.invalidate in circular deps (#​19870) (d4ee5e8), closes #​19870
• fix(preview): use host url to open browser (#​19836) (5003434), closes #​19836

---

Configuration

📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM, only on Monday ( * 0-3 * * 1 ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.