fix(deps): update non-major dependencies

[renovate]

Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Age	Confidence	Type	Update
@datadog/browser-rum (source)	7.15.0 → 7.16.0			dependencies	minor
@kong/kongponents (source)	9.64.23 → 9.66.1			dependencies	minor
@kong/spec-renderer	1.115.3 → 1.117.0			dependencies	minor
@vitejs/plugin-vue (source)	6.0.9 → 6.0.10			dependencies	patch
algoliasearch (source)	5.59.0 → 5.60.0			dependencies	minor
instantsearch.css	8.24.0 → 8.24.1			dependencies	patch
js-yaml	5.4.2 → 5.5.0			dependencies	minor
liquid-c (source)	4.0.1 → 4.2.0				minor
node (source)	24.21.0 → 24.22.0				minor
playwright (source)	1.63.0 → 1.64.1			dependencies	minor
postcss (source)	8.5.28 → 8.5.30			devDependencies	patch
rubocop (source, changelog)	1.91.0 → 1.92.0				minor
ruby/setup-ruby	v1.327.0 → v1.329.0			action	minor
snowflake-sdk	3.3.0 → 3.4.0			dependencies	minor
step-security/harden-runner	v2.22.0 → v2.22.1			action	patch
undici (source)	7.30.0 → 7.30.1			dependencies	patch
uuid	14.0.2 → 14.0.3			dependencies	patch
vite (source)	8.3.2 → 8.3.4			devDependencies	patch
vite-plugin-ruby (source)	5.2.5 → 5.2.6			devDependencies	patch
vue (source)	3.5.43 → 3.5.44			dependencies	patch
vue-instantsearch	4.30.0 → 4.30.1			dependencies	patch

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

DataDog/browser-sdk (@​datadog/browser-rum)

v7.16.0

Compare Source

Public Changes:

• ⚗️ Collect WebSocket vitals (#​5133)
• ✨ Add a point-in-time RUM action on the first hit of EXIT probes (#​5122)
• ✨ Send the build debug ID on Live Debugger Delivery API polls (#​5114)
• ✨ Start a RUM action on the first hit of each browser probe (#​5107)
• ✨ [MFE] Attribute browser logs using source code context (#​5074)
• ✨ Report WASM debug info type (#​5021)
• 🐛 Hide server-only flags in the developer extension Flags tab (#​5116)

Internal Changes:

• ✨ Expose expandOrRenew on the session manager (#​5112)
• 👷 Update all non-major dependencies (#​5126)
• 👷 Update dependency eslint-plugin-jsdoc to v65 (#​5128)
• 👷 Update dependency eslint-plugin-unicorn to v77 (#​5129)
• 👷 Update all non-major dependencies (#​5067)
• 👷 Bump chrome to 155.0.8059.39-1 (#​5118)
• 👷 Add a manual RUM FIT trigger for Browser SDK commits (#​5076)
• 👷 Update dependency @​angular/router to v22.2.0 [SECURITY] (#​5106)
• 👷 Update dependency next to v16.3.6 [SECURITY] (#​5105)
• 👷 Update dependency eslint-plugin-unicorn to v76 (#​5068)
• 👷 Bump chrome to 154.0.8037.57-1 (#​5057)
• ♻️ move pure utilities to @​datadog/js-core/util (#​4994)
• ✅ Test the snapshot probe location format (#​5110)
• ✅ Add canvas recording E2E coverage and expose configuration docs (#​5113)
• 🔇 Remove Cookie Store API write failure telemetry debug (#​5124)

Kong/kongponents (@​kong/kongponents)

v9.66.1

Compare Source

Bug Fixes

• deps: align vue with @​vue/server-renderer override to fix docs SSG [KHCP-22033] (#​3471) (200eb74)

v9.66.0

Compare Source

Features

• mcp: POC - mcp server in Kongponents [KHCP-21913] (#​3432) (7d94c8f), closes #​3467

9.65.3 (2026-10-16)

Bug Fixes

• kdatetimepicker: center calendar icon and add mono-lime [KHCP-22095] (#​3468) (14e282f)

9.65.2 (2026-10-16)

Bug Fixes

• deps: update dependency virtua to ^0.51.0 (#​3422) (63f89e5)

9.65.1 (2026-10-14)

Bug Fixes

• themes: classic night theme tweaks (#​3466) (41117b2)

v9.65.3

Compare Source

Bug Fixes

• kdatetimepicker: center calendar icon and add mono-lime [KHCP-22095] (#​3468) (14e282f)

v9.65.2

Compare Source

Bug Fixes

• deps: update dependency virtua to ^0.51.0 (#​3422) (63f89e5)

v9.65.1

Compare Source

Bug Fixes

• themes: classic night theme tweaks (#​3466) (41117b2)

v9.65.0

Compare Source

Features

• kcodeblock: add actions slot [KM-3400] (#​3464) (421c6fd)

9.64.25 (2026-10-09)

Bug Fixes

• kcopy: copy button focus visible styles (#​3462) (279efbe)

9.64.24 (2026-10-09)

Bug Fixes

• deps: resolve pnpm audit high vulnerabilities [KHCP-22033] (#​3455) (8dc9d14)

9.64.23 (2026-09-29)

Bug Fixes

• switching ci from pat to app token [KHCP-2195] (#​3448) (2b27020)

9.64.22 (2026-09-29)

Bug Fixes

• label slot in components using klabel [KHCP-21969] (#​3445) (c1bf309)

9.64.21 (2026-09-28)

Bug Fixes

• kselect, kmultiselect: dropdown open and close events [KHCP-21968] (#​3446) (23617fb)

9.64.20 (2026-09-24)

Bug Fixes

• focus visible in select dropdown items and tables [KHCP-21904] (#​3442) (eb17504)

9.64.19 (2026-09-23)

Bug Fixes

• deps: bundle date-fns to allow multiple majors in host app (#​3440) (cbe5256)

9.64.18 (2026-09-18)

Bug Fixes

• build: externalize runtime dependencies from the ES/CJS builds (#​3427) (87772b8)

9.64.17 (2026-09-15)

Bug Fixes

• ktabs: remove duplicate click handler (#​3425) (d1f34eb)

9.64.16 (2026-09-15)

Bug Fixes

• kinput: reveal safari generated passwords [TDX-8840] (#​3413) (ba2fc17)

9.64.15 (2026-09-09)

Bug Fixes

• deps: audit (#​3414) (9812fde)

9.64.14 (2026-09-01)

Bug Fixes

• add unsafe-inline (#​3408) (ea208b7)
• implement security headers in netlify.tom (#​3407) (6a70c24)

9.64.13 (2026-08-28)

Bug Fixes

• kselect: remove ineffective sticky footer styles [KM-3173] (#​3405) (81dba20)

9.64.12 (2026-08-26)

Bug Fixes

• failing test ci (#​3378) (bc1c3bc)

9.64.11 (2026-08-25)

Bug Fixes

• ksegmentedcontrol: horizontal scroll [KHCP-21533] (#​3362) (7f8323f)

9.64.10 (2026-08-20)

Bug Fixes

• deps: update design tokens for colors (#​3360) (5661908)

9.64.9 (2026-08-19)

Bug Fixes

• ktextarea: remove baseline gap below textarea wrapper (#​3359) (517a6d6)

9.64.8 (2026-08-13)

Bug Fixes

• ktabs: minimal appearance horizontal overflow (#​3351) (bdf08b2)

9.64.7 (2026-08-11)

Bug Fixes

• kradio: reset card label margin (#​3323) (17902ed)

9.64.6 (2026-08-10)

Bug Fixes

• kmultiselect: reactive selected item width (#​3347) (b6877c1)

9.64.5 (2026-08-07)

Bug Fixes

• ktreelist: tree item font-family (#​3340) (38157b9)

9.64.4 (2026-08-07)

Bug Fixes

• deps: bump nanoid, ws pnpm override (#​3336) (8924a1b)

9.64.3 (2026-08-06)

Bug Fixes

• deps: bump @​kong/design-tokens (#​3327) (c2d6998)
• theme order (#​3316) (e052d02)

9.64.2 (2026-07-30)

Bug Fixes

• sandbox high contrast (#​3315) (02775e7)

9.64.1 (2026-07-30)

Bug Fixes

• kmultiselect: reflect modelValue order in selectedItem badges (#​3314) (7fe2aa1)

v9.64.25

Compare Source

Bug Fixes

• kcopy: copy button focus visible styles (#​3462) (279efbe)

v9.64.24

Compare Source

Bug Fixes

• deps: resolve pnpm audit high vulnerabilities [KHCP-22033] (#​3455) (8dc9d14)

Kong/spec-renderer (@​kong/spec-renderer)

v1.117.0

Compare Source

Features

• tryit-response: allow copy tryit response headers and body [TDX-9132] (#​1052) (3a7f817)

v1.116.0

Compare Source

Features

• try-it: add OAuth2 authorization code + PKCE sign-in [TDX-9063] (#​1032) (b88bcc4)

1.115.3 (2026-10-02)

Bug Fixes

• deps: update dependency @​kong/icons to ^1.63.0 (#​1027) (46a9c72)
• input and dropdown component tokens [TDX-8968] (#​1033) (181fc7c)

1.115.2 (2026-09-30)

Bug Fixes

• try it button and toggle switch component tokens [TDX-8968] (#​1023) (98258a8)

1.115.1 (2026-09-27)

Bug Fixes

• deps: update all non-major dependencies with stable versions (#​1024) (a0645b6)

vitejs/vite-plugin-vue (@​vitejs/plugin-vue)

v6.0.10

Bug Fixes

• plugin-vue: compile transformed normal scripts outside vapor mode (#​857) (7b63e3c)
• plugin-vue: correct AST reuse checks and allow Vue 3.6 RC (ccc06dd)

Documentation

• plugin-vue: clarify compiler initialization hooks (55d0cab)

algolia/algoliasearch-client-javascript (algoliasearch)

v5.60.0

Compare Source

BREAKING CHANGES: this minor version includes breaking changes (A/B Testing V3 API, Agent Studio API). See below for more details.

• 812a3d1db6 chore(deps): dependencies 2026-09-14 (#​7030) by @​algolia-api-clients-automation-bot[bot]
• 41ed59956a fix(specs): clarify when _extra and _injectedItemKey are present on hits (#​7031) by @​charlottetaylor-oss
• 987444f36d fix(specs): clarify addItemKey description in injectedItem metadata (#​7029) by @​charlottetaylor-oss
• f6a0478eec docs(specs): update analytics catalog entitlement example (#​7028) by @​cdhawke
• 5da059b7ae feat(specs): add A/B test settings endpoints to abtesting-v3 (#​6786) by @​stevenMevans
• f89fe94db5 fix(clients): send request bodies with Content-Length instead of chunked encoding (#​7069) by @​Fluf22
• 461575c4a4 feat(specs): add A/B testing hypothesis (#​6829) by @​leonardogavaudan
• b58c40832b fix(specs): BREAKING CHANGE - make AB test pValue optional (#​7066) by @​stevenMevans
  • pValue is now optional in the A/B test models. Update code that reads it as a required value.
• 4cab83c8b1 feat(specs): add externalProvider source for CompAPI client (#​7073) by @​ClaraMuller
• b6cd822bfb feat(specs): add resultCard to renderingContent widgets (#​7084) by @​FabienMotte
• 63c591d078 refactor(specs): extract source object from behaviour object (#​7074) by @​ClaraMuller
• 07c1b2ea15 fix(specs): BREAKING CHANGE – sync agent-studio OpenAPI from conversational-ai (#​6967) by @​algolia-api-clients-automation-bot[bot]
  • The Agent Studio specs were updated to match the API behaviour, which may require updating your implementation:
  • createAgentCompletion: the body type changed from AgentCompletionRequest to AgentCompletionRequestUnion.
  • createAgent, updateAgent, getAgent: tool config models were renamed or merged (AlgoliaDisplayResultsToolConfig is now AlgoliaGroupedResultsToolConfig, AlgoliaRecommendToolConfigInput/Output are now AlgoliaRecommendToolConfig, ToolConfig is now ToolConfigOrBooleanUnion).
  • The memory request models MessagesUnionAgentConsolidateRequest, MessagesUnionAgentMemorizeRequest and MessagesUnionAgentPonderRequest were removed.
• a41727d2e1 chore(deps): dependencies 2026-09-21 (#​7068) by @​algolia-api-clients-automation-bot[bot]
• 9a6faf38f6 fix(specs): correct links to Algolia docs (#​7134) by @​kai687
• 329efbae3b fix(specs): update allowed value for externalProvider source ordering field (#​7131) by @​aiordache

algolia/instantsearch (instantsearch.css)

v8.24.1

Compare Source

Bug Fixes

• compareBar: styling tweaks (#​7276) (e0129e4)

nodeca/js-yaml (js-yaml)

v5.5.0

Compare Source

Changed

• Updated argparse to v3.
• Updated development dependencies.

Fixed

• Correct percent-encoding of shorthand and verbatim tags.
• Reject ,, ], and } at the start of block plain scalars, #​801.
• Report the exact position of non-printable characters in errors, #​801.

v5.4.3

Compare Source

Fixed

• Fixed loading a whitespace-only block scalar followed by a less indented
  line, #​802.

nodejs/node (node)

v24.22.0: 2026-10-14, Version 24.22.0 'Krypton' (LTS), @​richardlau prepared by @​aduh95

Compare Source

Notable Changes

• [ddbf974b47] - (SEMVER-MINOR) crypto: add crypto.parsePKCS12() (Brian Muenzenmeyer) #​65627
• [c162c68ff0] - (SEMVER-MINOR) crypto: add a generic MAC API (Filip Skokan) #​65553
• [a4ab3d84d7] - (SEMVER-MINOR) crypto: discover ciphers from OpenSSL providers (Filip Skokan) #​65484
• [c2f1e829ea] - (SEMVER-MINOR) crypto: discover hashes from OpenSSL providers (Filip Skokan) #​65484
• [51aad5a80d] - (SEMVER-MINOR) crypto: enable SIV and GCM-SIV modes in Cipher/Decipher APIs (Filip Skokan) #​63411
• [d11c65d2f2] - doc: add araujogui to collaborators (Guilherme Araújo) #​66090
• [acc1578179] - doc: deprecate Server.prototype._listen2 in node:net (Antoine du Hamel) #​65593
• [a7f8de6362] - (SEMVER-MINOR) net: support sending net.BoundSocket to threads and child processes (Guy Bedford) #​64725
• [60c3eb61bd] - (SEMVER-MINOR) perf_hooks: implement SlidingWindowHistogram (James M Snell) #​65825
• [6b3e6f9d5c] - (SEMVER-MINOR) perf_hooks: implement qrde analysis support in Histogram (James M Snell) #​65806
• [75456a3512] - (SEMVER-MINOR) perf_hooks: implement Histogram meanCI API (James M Snell) #​65606
• [72d1b40c56] - (SEMVER-MINOR) perf_hooks: add CBOR export/import for histogram exchange (James M Snell) #​65434
• [41161dda87] - (SEMVER-MINOR) sqlite: add StatementSync.prototype.close() (Guilherme Araújo) #​64232
• [adbc757d70] - (SEMVER-MINOR) sqlite: add StatementSync.prototype[Symbol.dispose]() (Guilherme Araújo) #​64232
• [241339f072] - (SEMVER-MINOR) src,lib: add util.markPromiseAsHandled (James M Snell) #​65805
• [63b0974d9e] - (SEMVER-MINOR) util: implement util.throttle (James M Snell) #​65899
• [a3bbb5a26f] - (SEMVER-MINOR) util: implement debounce (James M Snell) #​65899

Commits

• [e6832b2cb1] - assert: fix TypeError on deepStrictEqual with null Map key or Set member (Sergey Sannikov) #​64449
• [a079177d9f] - benchmark: add --csv option to compare.js with --analyze (James M Snell) #​65922
• [10b1a0f70f] - benchmark: fix max-regressions detection in compare.js (James M Snell) #​65587
• [e0c7ba8ad5] - benchmark: add --analyze option to benchmark/scatter.js (James M Snell) #​65594
• [21fed10bb0] - benchmark: add crypto class benchmarks (Filip Skokan) #​65518
• [fa912242b7] - buffer: fix unaligned UTF-16LE decoding (Matteo Collina) #​65905
• [a6bd0c1413] - build: suppress OpenSSL asm warnings with clang (Richard Lau) #​66023
• [94e12139ee] - build: derive V8_LOGGING_LEVEL from dcheck_always_on (Joyee Cheung) #​65744
• [7a2f322943] - build: fix quiet default for make builds (Shelley Vohr) #​65826
• [c280d650b0] - build: allow linking shared dependencies in the GN build (Shelley Vohr) #​65797
• [4b23a4472c] - build: enable the V8 sandbox in shared-cage builds (Shelley Vohr) #​62237
• [676e15c003] - build: define V8_CONTIGUOUS_COMPRESSED_RO_SPACE for shared cage (Shelley Vohr) #​65464
• [f784058482] - build: remove obsolete configure flags (Chengzhong Wu) #​65456
• [f63f37d243] - build: activate correct default flags for riscv64 (Stewart X Addison) #​65708
• [da46ac075d] - build: derive NODE_ARCH from target_cpu in the GN build (Shelley Vohr) #​65491
• [249e9a16dd] - build,src: gate jspi flag on V8_ENABLE_WEBASSEMBLY (Piotr Kubaj) #​66082
• [146f00f64b] - child_process: clear timeout timer on spawn-time error too (kishore280) #​65506
• [13987f4418] - crypto: remove redundent std::move call (Antoine du Hamel) #​66111
• [ef957ac85f] - crypto: skip private RSA parameters in key details (Filip Skokan) #​66108
• [8feccc5e22] - crypto: use provider EC group names (Filip Skokan) #​66108
• [764e0d1120] - crypto: fetch ciphers for private-key encoding (Filip Skokan) #​66108
• [50ffed1979] - crypto: decode PKCS#1 keys through providers (Filip Skokan) #​66108
• [56c16b2fd6] - crypto: derive keys through EVP_KDF (Filip Skokan) #​66108
• [a4effe6809] - crypto: use names for asymmetric key algorithms (Filip Skokan) #​65966
• [ddbf974b47] - (SEMVER-MINOR) crypto: add crypto.parsePKCS12() (Brian Muenzenmeyer) #​65627
• [8e631aa48f] - crypto: add Hybrid KEMs to Web Cryptography (Filip Skokan) #​65759
• [5c51129e16] - crypto: optimize private EC JWK import (Filip Skokan) #​65908
• [c2ec40c2d7] - crypto: disable non-FIPS WebCrypto paths in FIPS mode (Filip Skokan) #​65172
• [e198aa0f79] - crypto: read RSA-PSS restrictions from provider (Filip Skokan) #​66108
• [253784f0e9] - crypto: optimize and benchmark key preparation (Filip Skokan) #​65892
• [80a6ad509b] - crypto: avoid EC reconstruction for signature sizing (Filip Skokan) #​65908
• [5b592b772c] - crypto: avoid EC raw export reconstruction (Filip Skokan) #​65908
• [ee956ae3bf] - crypto: export EC JWK coordinates directly (Filip Skokan) #​65908
• [684008be58] - crypto: read EC curve metadata directly (Filip Skokan) #​65908
• [f4665f1c41] - crypto: validate the limit of PBKDF2 iterations (Filip Skokan) #​65704
• [624abbecd7] - crypto: use primordials in HKDF info validation (Filip Skokan) #​65704
• [e4d916f175] - crypto: add mgf1Hash for RSA-OAEP (Adam Mcgrath) #​65073
• [db8a9162a8] - crypto: fix multi-prime RSA JWKs (Filip Skokan) #​65649
• [022ac83504] - crypto: cache valid ECDH key pairs (Filip Skokan) #​65615
• [c61953ebcc] - crypto: add strict mode to --force-fips (Filip Skokan) #​65645
• [db6ea132a5] - crypto: add FIPS indicator diagnostics channel (Filip Skokan) #​65645
• [c162c68ff0] - (SEMVER-MINOR) crypto: add a generic MAC API (Filip Skokan) #​65553
• [2b62aafd20] - crypto: validate JWK usages before key_ops (Filip Skokan) #​65550
• [ec7819db69] - crypto: fix RSA-PSS oversized salt handling (Filip Skokan) #​65550
• [a4ab3d84d7] - (SEMVER-MINOR) crypto: discover ciphers from OpenSSL providers (Filip Skokan) #​65484
• [c2f1e829ea] - (SEMVER-MINOR) crypto: discover hashes from OpenSSL providers (Filip Skokan) #​65484
• [51aad5a80d] - (SEMVER-MINOR) crypto: enable SIV and GCM-SIV modes in Cipher/Decipher APIs (Filip Skokan) #​63411
• [5a46a9acbb] - crypto: improve SubtleCrypto.supports() accuracy (Filip Skokan) #​65222
• [191ebfb26c] - crypto: fix public PKCS8 export error (한국) #​65609
• [b6d7ed372b] - crypto: fix private SPKI export error (Filip Skokan) #​65550
• [79509c25a4] - crypto: correct CCM decryption FIPS error message (kyungrae) #​65450
• [9adc87bc16] - crypto: harden X509Certificate state (Filip Skokan) #​65518
• [c63aa331b4] - crypto: optimize key slot caching (Filip Skokan) #​65518
• [87daea43a7] - crypto: add null checks for OPENSSL_INIT_new() (Nora Dossche) #​63457
• [98ca5e9358] - crypto: prevent Hmac.digest() from returning uninitialized memory (Matteo Collina) #​65112
• [0c090a28cd] - crypto: avoid throwing CryptoKey brand checks (Filip Skokan) #​65503
• [a13cc3f723] - crypto: avoid throwing KeyObject brand checks (Filip Skokan) #​65503
• [b8db0045ef] - deps: V8: cherry-pick ea9c016 (Gundepalli Sravani) #​66570
• [ba09b53487] - deps: V8: backport c355350 (Jakob Linke) #​66089
• [9ce8ef405b] - deps: V8: backport 8901c79 (Toon Verwaest) #​66089
• [fb0d0ca289] - deps: V8: backport 0b94a9f (Ruan Gustavo) #​65753
• [2faca508c0] - deps: update googletest to 8eff9e3 (Node.js GitHub Bot) #​66009
• [4396c9bffe] - deps: update googletest to 283c175 (Node.js GitHub Bot) #​65833
• [8a5b12570c] - deps: update simdjson to 4.6.11 (Node.js GitHub Bot) #​65834
• [c47feb09e8] - deps: update zlib to 1.3.2.1-motley-285e94b (Node.js GitHub Bot) #​65835
• [9f0d905286] - deps: upgrade npm to 11.19.1 (npm team) #​65573
• [373cd332d8] - deps: update googletest to 36ba75f (Node.js GitHub Bot) #​65654
• [aeed6132a7] - deps: update simdjson to 4.6.9 (Node.js GitHub Bot) #​65655
• [2583571342] - deps: update zlib to 1.3.2.1-motley-5eb4d7e (Node.js GitHub Bot) #​65494
• [d11c65d2f2] - doc: add araujogui to collaborators (Guilherme Araújo) #​66090
• [[0a4a8d602a](

[!IMPORTANT]
✂ PR body was truncated to here.

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • "every weekend"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[netlify]

✅ Deploy Preview for kongdeveloper ready!

Name	Link
🔨 Latest commit	78bac73
🔍 Latest deploy log	https://app.netlify.com/projects/kongdeveloper/deploys/6ad292a497f2bdf881f5f88c
😎 Deploy Preview	https://deploy-preview-7525--kongdeveloper.netlify.app
📱 Preview on mobile	Toggle QR Code... Use your smartphone camera to open QR code link.
🤖 Make changes	Run an agent on this branch

---

To edit notification comments on pull requests, go to your Netlify project configuration.