chore(deps): update all non-major dependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
pnpm (source)	8.7.0 -> 8.7.5
undici (source)	~5.23.0 -> ~5.24.0

---

Release Notes

pnpm/pnpm (pnpm)

v8.7.5

Compare Source

Patch Changes

• Improve performance of installation by using a worker for creating the symlinks inside node_modules/.pnpm #​7069.
• Tarballs that have hard links are now unpacked successfully. This fixes a regression introduced in v8.7.0, which was shipped with our new in-house tarball parser #​7062.

Our Gold Sponsors

Our Silver Sponsors

v8.7.4

Compare Source

Patch Changes

• Fix a bug causing the pnpm server to hang if a tarball worker was requested while another worker was exiting #​7041.
• Fixes a regression published with pnpm v8.7.3. Don't hang while reading package.json from the content-addressable store #​7051.
• Allow create scoped package with preferred version. #​7053
• Reverting a change shipped in v8.7 that caused issues with the pnpm deploy command and "injected dependencies" #​6943.

Our Gold Sponsors

Our Silver Sponsors

v8.7.3

Compare Source

Patch Changes

• Fix a bug causing errors to be printed as "Cannot read properties of undefined (reading 'code')" instead of the underlying reason when using the pnpm store server #​7032

Our Gold Sponsors

Our Silver Sponsors

v8.7.2

Compare Source

v8.7.1

Compare Source

Patch Changes

• Fixed an issue with extracting some old versions of tarballs #​6991.
• Side-effects cache will now be leveraged when running install in a workspace that uses dedicated lockfiles for each project #​6890.
• Reduce concurrency in the pnpm -r publish command #​6968.
• Improved the pnpm update --interactive output by grouping dependencies by type. Additionally, a new column has been added with links to the documentation for outdated packages #​6978.

Our Gold Sponsors

Our Silver Sponsors

nodejs/undici (undici)

v5.24.0

Compare Source

Notable Changes

• feat: Add H2 support by @​metcoder95 in https://github.com/nodejs/undici/pull/2061

What's Changed

• build(deps): bump step-security/harden-runner from 2.4.1 to 2.5.0 by @​dependabot in https://github.com/nodejs/undici/pull/2203
• better stack trace for body.json by @​KhafraDev in https://github.com/nodejs/undici/pull/2215
• allow http & https websocket urls by @​KhafraDev in https://github.com/nodejs/undici/pull/2218
• build(deps-dev): bump @​sinonjs/fake-timers from 10.3.0 to 11.1.0 by @​dependabot in https://github.com/nodejs/undici/pull/2221
• fix: pass ProxyAgent proxy status code error by @​NBNGaming in https://github.com/nodejs/undici/pull/2162
• fix failing test by @​KhafraDev in https://github.com/nodejs/undici/pull/2223
• docs: update MockPool.md intercept method description by @​capaj in https://github.com/nodejs/undici/pull/2220
• Update wpts by @​KhafraDev in https://github.com/nodejs/undici/pull/2226
• build(deps): bump github/codeql-action from 2.21.2 to 2.21.5 by @​dependabot in https://github.com/nodejs/undici/pull/2240
• build(deps): bump actions/setup-node from 3.6.0 to 3.8.1 by @​dependabot in https://github.com/nodejs/undici/pull/2237
• build(deps): bump fastify/github-action-merge-dependabot from 3.9.0 to 3.9.1 by @​dependabot in https://github.com/nodejs/undici/pull/2236
• build(deps): bump actions/checkout from 3.5.3 to 3.6.0 by @​dependabot in https://github.com/nodejs/undici/pull/2241
• build(deps): bump actions/dependency-review-action from 3.0.6 to 3.0.8 by @​dependabot in https://github.com/nodejs/undici/pull/2238
• fix: aborting request with non-object error by @​KhafraDev in https://github.com/nodejs/undici/pull/2243
• fix: preserve file path when parsing formdata by @​jimmywarting in https://github.com/nodejs/undici/pull/2245
• build(deps-dev): bump tsd from 0.28.1 to 0.29.0 by @​dependabot in https://github.com/nodejs/undici/pull/2246
• Updated benchmarks by @​mcollina in https://github.com/nodejs/undici/pull/2250
• Fix fetch in node v20.6.0 by @​mcollina in https://github.com/nodejs/undici/pull/2251
• Maybe fix v20 by @​mcollina in https://github.com/nodejs/undici/pull/2252
• feat: Add H2 support by @​metcoder95 in https://github.com/nodejs/undici/pull/2061
• docs: fix tables in README by @​regseb in https://github.com/nodejs/undici/pull/2254
• Fix http2 fetch test by @​mcollina in https://github.com/nodejs/undici/pull/2253

New Contributors

• @​NBNGaming made their first contribution in https://github.com/nodejs/undici/pull/2162
• @​capaj made their first contribution in https://github.com/nodejs/undici/pull/2220
• @​regseb made their first contribution in https://github.com/nodejs/undici/pull/2254

Full Changelog: nodejs/undici@v5.23.0...v5.24.0

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate. View repository job log here.

[changeset-bot]

🦋 Changeset detected

Latest commit: d8a48ee

The changes in this PR will be included in the next version bump.

This PR includes changesets to release 1 package

Name	Type
@sveltejs/kit	Patch

Not sure what this means? Click here to learn what changesets are.

Click here if you're a maintainer who wants to add another changeset to this PR