Bump the production-dependencies group with 4 updates

[dependabot]

Bumps the production-dependencies group with 4 updates: flexsearch, sharp, shiki and esbuild.

Updates flexsearch from 0.8.205 to 0.8.212

Commits

• See full diff in compare view

Updates sharp from 0.34.4 to 0.34.5

Release notes

Sourced from sharp's releases.

v0.34.5

• Upgrade to libvips v8.17.3 for upstream bug fixes.

• Add experimental support for prebuilt Linux RISC-V 64-bit binaries.

• Support building from source with npm v12+, deprecate --build-from-source flag. #4458

• Add support for BigTIFF output. #4459 @​throwbi

• Improve error messaging when only warnings issued. #4465

• Simplify ICC processing when retaining input profiles. #4468

v0.34.5-rc.1

• Upgrade to libvips v8.17.3 for upstream bug fixes.

• Add experimental support for prebuilt Linux RISC-V 64-bit binaries.

• Support building from source with npm v12+, deprecate --build-from-source flag. #4458

• Add support for BigTIFF output. #4459 @​throwbi

• Improve error messaging when only warnings issued. #4465

• Simplify ICC processing when retaining input profiles. #4468

v0.34.5-rc.0

• Upgrade to libvips v8.17.3 for upstream bug fixes.

• Add experimental support for prebuilt Linux RISC-V 64-bit binaries.

• Support building from source with npm v12+, deprecate --build-from-source flag. #4458

• Add support for BigTIFF output. #4459 @​throwbi

• Improve error messaging when only warnings issued. #4465

... (truncated)

Commits

• e062456 Release v0.34.5
• 6450c70 Prerelease v0.34.5-rc.1
• f7c95d1 TypeScript: consolidate a few enum-like properties
• ef86a75 Prerelease v0.34.5-rc.0
• 6c1e840 Use structured binding for tuples where possible
• e1628d8 Simplify ICC processing when retaining input profiles #4468
• 4f9f817 Linter: apply all recommended biome settings
• 09d5aa8 Docs: update internal and libvips doc links
• 040b73c Upgrade to libvips v8.17.3
• 1f2f33d Ensure licensing headers are retained by code bundlers
• Additional commits viewable in compare view

Updates shiki from 1.26.2 to 3.15.0

Release notes

Sourced from shiki's releases.

v3.15.0

   🚀 Features

• lang-ansi: Fallback for missing theme ANSI colors  -  by @​Chanakyasinde and @​antfu in shikijs/shiki#1095 (f36ea)
• transformers: Support meta.indent for indent guides  -  by @​L33Z22L11 in shikijs/shiki#1087 (d8f89)

   🐞 Bug Fixes

• Allow singleton highlighter recovery after invalid language error  -  by @​Maxiemad in shikijs/shiki#1091 (218c9)
• vitepress-twoslash: Prevent popper show/hide on dragging  -  by @​bluwy in shikijs/shiki#1090 (29522)

    View changes on GitHub

v3.14.0

   🚀 Features

• Update grammars and themes  -  by @​antfu (26372)

   🐞 Bug Fixes

• colorized-brackets: Fix default color does not work with colorized-brackets  -  by @​oatmealproblem in shikijs/shiki#1082 (f4d3f)

    View changes on GitHub

v3.13.0

   🚀 Features

• transformers: Render indent guides  -  by @​KazariEX and @​antfu in shikijs/shiki#1060 (aecd1)

    View changes on GitHub

v3.12.3

   🐞 Bug Fixes

• @shikijs/twoslash version specifier  -  by @​9romise in shikijs/shiki#1078 (a1cde)

    View changes on GitHub

v3.12.2

   🐞 Bug Fixes

• twoslash: Fix onTwoslashError return value handling  -  by @​Karibash in shikijs/shiki#1070 (e86b0)

    View changes on GitHub

v3.12.1

No significant changes

    View changes on GitHub

... (truncated)

Commits

• 63ab64b chore: release v3.15.0
• 218c901 fix: allow singleton highlighter recovery after invalid language error (#1091)
• c056371 chore: update snapshot
• 29f8914 chore: release v3.14.0
• 26372e6 feat: update grammars and themes
• fd7326a chore: release v3.13.0
• 5cbb052 chore: release v3.12.3
• e462618 chore: release v3.12.2
• 793d71e chore: release v3.12.1
• 9260f3f chore: release v3.12.0
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for shiki since your current version.

Updates esbuild from 0.25.12 to 0.26.0

Release notes

Sourced from esbuild's releases.

v0.26.0

• Enable trusted publishing (#4281)

  GitHub and npm are recommending that maintainers for packages such as esbuild switch to trusted publishing. With this release, a VM on GitHub will now build and publish all of esbuild's packages to npm instead of me. In theory.

  Unfortunately there isn't really a way to test that this works other than to do it live. So this release is that live test. Hopefully this release is uneventful and is exactly the same as the previous one (well, except for the green provenance attestation checkmark on npm that happens with trusted publishing).

Changelog

Sourced from esbuild's changelog.

0.26.0

• Enable trusted publishing (#4281)

  GitHub and npm are recommending that maintainers for packages such as esbuild switch to trusted publishing. With this release, a VM on GitHub will now build and publish all of esbuild's packages to npm instead of me. In theory.

  Unfortunately there isn't really a way to test that this works other than to do it live. So this release is that live test. Hopefully this release is uneventful and is exactly the same as the previous one (well, except for the green provenance attestation checkmark on npm that happens with trusted publishing).

Commits

• 17ff82b publish 0.26.0 to npm
• f87181f enable trusted publishing (#4319)
• fdece95 some deno-related fixes
• 38cf8bc add a dummy publish.yml
• See full diff in compare view

Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for esbuild since your current version.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[dependabot]

Looks like these dependencies are updatable in another way, so this is no longer needed.