fix(deps): update patch updates (patch)

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
@anolilab/semantic-release-preset (source)	^13.4.25 → ^13.4.32
brace-expansion@<1.1.16	^5.0.9 → ^5.0.12
brace-expansion@<=5.0.7	^5.0.9 → ^5.0.12
fast-uri@<=3.1.0	^4.1.4 → ^4.1.5
fast-uri@<=3.1.1	^4.1.4 → ^4.1.5
pnpm (source)	12.4.1 → 12.4.2

⚠️ Renovate does not enforce Minimum Release Age for bump, lockfileUpdate, or rollback updates, so these are raised without a Minimum Release Age check. You will need to manually validate the Minimum Release Age for these package(s).

---

Release Notes

anolilab/semantic-release (@​anolilab/semantic-release-preset)

v13.4.32

Compare Source

Dependencies

• @​anolilab/semantic-release-clean-package-json: upgraded to 5.5.27
• @​anolilab/semantic-release-pnpm: upgraded to 8.1.31

v13.4.31

Compare Source

Dependencies

• @​anolilab/semantic-release-clean-package-json: upgraded to 5.5.26
• @​anolilab/semantic-release-pnpm: upgraded to 8.1.30

v13.4.30

Compare Source

Dependencies

• @​anolilab/semantic-release-clean-package-json: upgraded to 5.5.25
• @​anolilab/semantic-release-pnpm: upgraded to 8.1.29

v13.4.29

Compare Source

Dependencies

• @​anolilab/semantic-release-clean-package-json: upgraded to 5.5.24
• @​anolilab/semantic-release-pnpm: upgraded to 8.1.28

v13.4.28

Compare Source

Dependencies

• @​anolilab/semantic-release-clean-package-json: upgraded to 5.5.23
• @​anolilab/semantic-release-pnpm: upgraded to 8.1.27

v13.4.27

Compare Source

Dependencies

• @​anolilab/semantic-release-clean-package-json: upgraded to 5.5.22
• @​anolilab/semantic-release-pnpm: upgraded to 8.1.26

juliangruber/brace-expansion (brace-expansion@<1.1.16)

v5.0.12

Compare Source

v5.0.11

Compare Source

v5.0.10

Compare Source

fastify/fast-uri (fast-uri@<=3.1.0)

v4.1.5

Compare Source

⚠️ Security Warning

This security release fixes the following medium-severity security advisories:

• GHSA-jvvf-x445-j334 — mailto header injection via percent-encoded field-name desynchronization
• GHSA-hrr3-gc8f-f4qj — inconsistent host case normalization via percent-encoded octets

Users of the v4 release line should upgrade to v4.1.5.

Full Changelog: fastify/fast-uri@v4.1.4...v4.1.5

pnpm/pnpm (pnpm)

v12.4.2

Compare Source

---

Configuration

📅 Schedule: (in timezone Europe/Berlin)

• Branch creation
  • "after 10:00 before 19:00 every weekday except after 13:00 before 14:00"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Advanced

Run ID: 0e747878-0f2e-4860-bfa7-8f0d66cd2049

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

• Autopilot · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Autopilot is currently an internal CodeRabbit preview.

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	@​anolilab/​semantic-release-preset@​13.4.26 ⏵ 13.4.32	-8			+1

View full report