chore(deps): update all non-major dependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence	Type	Update
@unocss/preset-attributify (source)	^66.5.1 -> ^66.5.2			devDependencies	patch
@unocss/preset-icons (source)	^66.5.1 -> ^66.5.2			devDependencies	patch
@unocss/preset-uno (source)	^66.5.1 -> ^66.5.2			devDependencies	patch
eslint (source)	^9.35.0 -> ^9.37.0			devDependencies	minor
eslint-plugin-format	^1.0.1 -> ^1.0.2			devDependencies	patch
github.com/go-playground/validator/v10	v10.27.0 -> v10.28.0			require	minor
github.com/quic-go/quic-go	v0.54.1 -> v0.55.0			require	minor
github.com/shirou/gopsutil/v4	v4.25.8 -> v4.25.9			require	patch
go (source)	1.25.1 -> 1.25.2			golang	patch
go	1.25.1 -> 1.25.2			uses-with	patch
google.golang.org/protobuf	v1.36.9 -> v1.36.10			require	patch
typescript (source)	^5.9.2 -> ^5.9.3			devDependencies	patch
unocss (source)	^66.5.1 -> ^66.5.2			devDependencies	patch
vite (source)	^7.1.5 -> ^7.1.9			dependencies	patch
vite (source)	^7.1.5 -> ^7.1.9			devDependencies	patch
vue (source)	^3.5.21 -> ^3.5.22			devDependencies	patch
vue (source)	^3.5.21 -> ^3.5.22			dependencies	patch

---

Release Notes

unocss/unocss (@​unocss/preset-attributify)

v66.5.2

Compare Source

   🐞 Bug Fixes

• eslint: Enhance handling of array expressions  -  by @​julienbenac and @​zyyv in #​4925 (d5e08)
• preset-wind4: Add unit for 0 deg close #​4921  -  by @​zyyv in #​4921 (cb7ae)
• transformer-directive: Replace $$ selector with nomerge utils  -  by @​zyyv in #​4930 (1a448)

    View changes on GitHub

eslint/eslint (eslint)

v9.37.0

Compare Source

v9.36.0

Compare Source

antfu/eslint-plugin-format (eslint-plugin-format)

v1.0.2

Compare Source

No significant changes

    View changes on GitHub

go-playground/validator (github.com/go-playground/validator/v10)

v10.28.0: Release 10.28.0

Compare Source

What's Changed

• Update workflow.yml to support 2 most recent major versions by @​nodivbyzero in #​1417
• Bump actions/checkout from 4 to 5 by @​dependabot[bot] in #​1456
• Go 1.25 support by @​nodivbyzero in #​1459
• Bump github.com/gabriel-vasile/mimetype from 1.4.8 to 1.4.10 by @​dependabot[bot] in #​1463
• Bump golang.org/x/text from 0.22.0 to 0.29.0 by @​dependabot[bot] in #​1464
• Bump actions/setup-go from 5 to 6 by @​dependabot[bot] in #​1465
• Bump golang.org/x/crypto from 0.33.0 to 0.42.0 by @​dependabot[bot] in #​1467
• fix: should panic when define duplicate field param in required_if by @​duyquang6 in #​1468
• Fixed missing keys from returned errors in map validation by @​gelozr in #​1284
• Added https_url tag by @​ahmedkamalio in #​1461
• docs: add description for 'port' validator by @​nodivbyzero in #​1435
• Add alphaspace validator by @​takaaa220 in #​1343

New Contributors

• @​duyquang6 made their first contribution in #​1468
• @​gelozr made their first contribution in #​1284
• @​ahmedkamalio made their first contribution in #​1461
• @​takaaa220 made their first contribution in #​1343

Full Changelog: go-playground/validator@v10.27.0...v10.28.0

quic-go/quic-go (github.com/quic-go/quic-go)

v0.55.0

Compare Source

This release contains a number of improvements and fixes, and it updates the supported Go versions to 1.24 and 1.25.

Optimizations

When sending packets on a QUIC connection, RFC 9002 requires us to save the timestamp for every packet sent. In #​5344, we implemented a memory-optimized drop-in replacement for time.Time, which reduces the memory required from 24 to 8 bytes, and vastly speeds up timer calculations (which happen very frequently).

New Features

• Basic connection statistics are now exposed via Conn.ConnectionStats, thanks to @​MarcoPolo
• On some links, packet reordering can lead to spurious detections of packet loss when using the loss detection logic specified in RFC 9002. #​5355 adds logic detect when packet loss is detected spuriously.

Notable Fixes

• http3: don't allow usage of closed Transport: #​5324, thanks to @​Glonee
• http3: fix race in concurrent Transport.Roundtrip calls: #​5323, thanks to @​Glonee
• improve and fix connection timer logic: #​5339, thanks to @​sukunrt for a very comprehensive code review

Behind the Scenes

We have started transitioning tests to make use of the new synctest package that was added in Go 1.25 (and was available as a GOEXPERIMENT in Go 1.24): #​5291, #​5296, #​5298, #​5299, #​5302, #​5304, #​5305, #​5306, #​5317. This is a lot of work, but it makes the test execution both faster and more reliable.

Changelog

• wire: implement parsing and writing of the ACK_FREQUENCY frame by @​marten-seemann in #​5264
• wire: implement parsing and writing of the IMMEDIATE_ACK frame by @​marten-seemann in #​5265
• fuzzing: fix timeout in frame parser by @​jannis-seemann in #​5268
• wire: add support for the min_ack_delay transport parameter by @​marten-seemann in #​5266
• fix missing log statement for STREAM, DATAGRAM and ACK by @​jannis-seemann in #​5273
• qlog: add support for ACK_FREQUENCY and IMMEDIATE_ACK frames by @​marten-seemann in #​5276
• ackhandler: remove unused time from receivedPacketHandler.ReceivedPacket by @​marten-seemann in #​5277
• quicvarint: extend benchmark to use quicvarint.Reader by @​marten-seemann in #​5278
• quicvarint: tolerate empty reads of the underlying io.Reader by @​bemasc in #​5275
• http3: fix documentation for Server.ServeListener by @​WeidiDeng in #​5282
• expose connection stats via Conn.ConnectionStats by @​marten-seemann in #​5281
• ackhandler: generalize check for missing packets below threshold by @​marten-seemann in #​5260
• update to Go 1.25, drop Go 1.23, use go tool for gomock by @​marten-seemann in #​5283
• replace interface{} with any by @​marten-seemann in #​5290
• use testing.B.Loop in all benchmark tests by @​marten-seemann in #​5285
• build(deps): bump actions/checkout from 4 to 5 by @​dependabot[bot] in #​5293
• use synctest to make receive stream tests fully deterministc by @​marten-seemann in #​5291
• use synctest to make streams map tests fully deterministic by @​marten-seemann in #​5296
• ci: cache the Go build cache for cross-compilation workflow by @​marten-seemann in #​5297
• ci: fix cache save and restore logic for cross compile workflow by @​marten-seemann in #​5300
• restore previously deleted TestStreamsMapConcurrent test by @​marten-seemann in #​5301
• use synctest to make the send queue tests fully deterministic by @​marten-seemann in #​5302
• use synctest to make the send stream tests fully deterministic by @​marten-seemann in #​5298
• ci: use go mod tidy -diff to check for tidied go.mod by @​marten-seemann in #​5303
• use synctest to make the datagram queue tests fully deterministic by @​marten-seemann in #​5305
• utils: use synctest to make the timer tests fully deterministic by @​marten-seemann in #​5306
• ackhandler: fix resetting of packet.isPathProbePacket by @​marten-seemann in #​5310
• ackhandler: use an iterator to process received packet ranges by @​marten-seemann in #​5309
• ackhandler: use a typed mock for the ECNHandler by @​marten-seemann in #​5311
• ackhandler: immediately clear ackedPacket slice after processing ACK by @​marten-seemann in #​5313
• ci: improve cache key generation for the cross compilation job by @​marten-seemann in #​5315
• ci: fix cache paths in cross compile workflow by @​marten-seemann in #​5318
• ackhandler: avoid storing packet number in packet struct by @​marten-seemann in #​5312
• ackhandler: store skipped packet numbers separately by @​marten-seemann in #​5314
• ackhandler: account for skipped packets in packet threshold calculation by @​marten-seemann in #​5316
• ackhandler: store the last four skipped packets by @​marten-seemann in #​5322
• http3: fix data race in Transport by @​Glonee in #​5323
• qlog: add a benchmark for the ConnectionTracer by @​marten-seemann in #​5328
• qlog: merge event category and name by @​marten-seemann in #​5329
• http3: don't allow usage of closed Transport by @​Glonee in #​5324
• build(deps): bump actions/setup-go from 5 to 6 by @​dependabot[bot] in #​5330
• fix: return stream frames to pool on error paths by @​lidel in #​5327
• ackhandler: add a benchmark for sending and acknowledging packets by @​marten-seemann in #​5333
• implement a memory-optimized time.Time replacement by @​marten-seemann in #​5334
• add a benchmark test for data transfers by @​marten-seemann in #​5335
• improve connection timer logic by @​marten-seemann in #​5339
• use synctest to make the connection tests fully deterministic by @​marten-seemann in #​5317
• drop initial packets when the handshake is confirmed by @​marten-seemann in #​5354
• protocol: optimize ConnectionID.String by @​marten-seemann in #​5351
• fix missing tracing of restored transport parameters by @​marten-seemann in #​5349
• ackhandler: track lost packets and detect spurious losses by @​marten-seemann in #​5355

New Contributors

• @​bemasc made their first contribution in #​5275
• @​lidel made their first contribution in #​5327

Full Changelog: quic-go/quic-go@v0.54.0...v0.55.0

shirou/gopsutil (github.com/shirou/gopsutil/v4)

v4.25.9

Compare Source

What's Changed

cpu

• get max Mhz per package without wmi by @​OrbintSoft in #​1919
• [cpu][windows]: add logical processor count error handling by @​shirou in #​1925
• Family and PhysicalID without wmi by @​OrbintSoft in #​1926
• Cores count without wmi by @​OrbintSoft in #​1915

disk

• [disk][linux]: fix lint (gofumpt) by @​shirou in #​1928
• fix infinite loop by @​StefanoBalzarottiNozomi in #​1922

process

• refactor: use slices.Contains to simplify code by @​wmypku in #​1906

Other Changes

• fix: github action labeler.yml confirugration format by @​shirou in #​1918
• limit memory usage on warnings list by @​StefanoBalzarottiNozomi in #​1920

New Contributors

• @​wmypku made their first contribution in #​1906
• @​StefanoBalzarottiNozomi made their first contribution in #​1920

Full Changelog: shirou/gopsutil@v4.25.8...v4.25.9

golang/go (go)

v1.25.2

actions/go-versions (go)

v1.25.2: 1.25.2

Compare Source

Go 1.25.2

protocolbuffers/protobuf-go (google.golang.org/protobuf)

v1.36.10

Compare Source

microsoft/TypeScript (typescript)

v5.9.3

Compare Source

vitejs/vite (vite)

v7.1.9

Compare Source

Reverts

• server: drain stdin when not interactive (#​20885) (12d72b0)

v7.1.8

Compare Source

Bug Fixes

• css: improve url escape characters handling (#​20847) (24a61a3)
• deps: update all non-major dependencies (#​20855) (788a183)
• deps: update artichokie to 0.4.2 (#​20864) (e670799)
• dev: skip JS responses for document requests (#​20866) (6bc6c4d)
• glob: fix HMR for array patterns with exclusions (#​20872) (63e040f)
• keep ids for virtual modules as-is (#​20808) (d4eca98)
• server: drain stdin when not interactive (#​20837) (bb950e9)
• server: improve malformed URL handling in middlewares (#​20830) (d65a983)

Documentation

• create-vite: provide deno example (#​20747) (fdb758a)

Miscellaneous Chores

• deps: update rolldown-related dependencies (#​20810) (ea68a88)
• deps: update rolldown-related dependencies (#​20854) (4dd06fd)
• update url of create-react-app license (#​20865) (166a178)

v7.1.7

Compare Source

Bug Fixes

• build: fix ssr environment emitAssets: true when sharedConfigBuild: true (#​20787) (4c4583c)
• client: use CSP nonce when rendering error overlay (#​20791) (9bc9d12)
• deps: update all non-major dependencies (#​20811) (9f2247c)
• glob: handle glob imports from folders starting with dot (#​20800) (105abe8)
• hmr: trigger prune event when import is removed from non hmr module (#​20768) (9f32b1d)
• hmr: wait for import.meta.hot.prune callbacks to complete before running other HMRs (#​20698) (98a3484)

v7.1.6

Compare Source

Bug Fixes

• deps: update all non-major dependencies (#​20773) (88af2ae)
• esbuild: inject esbuild helper functions with minified $ variables correctly (#​20761) (7e8e004)
• fallback terser to main thread when nameCache is provided (#​20750) (a679a64)
• types: strict env typings fail when skipLibCheck is false (#​20755) (cc54e29)

Miscellaneous Chores

• deps: update rolldown-related dependencies (#​20675) (a67bb5f)
• deps: update rolldown-related dependencies (#​20772) (d785e72)

vuejs/core (vue)

v3.5.22

Compare Source

Bug Fixes

• compiler-core: identifiers in switch-case should not be inferred as references (#​13923) (5953c9f)
• compiler-dom: nodes with v-once shouldn't be stringified (#​13878) (95c1975)
• compiler-sfc: add support for @vue-ignore in runtime type resolution (#​13906) (ba7f7f9)
• compiler-sfc: enhance inferRuntimeType to support TSMappedType with indexed access (#​13848) (e388f1a), closes #​13847
• compiler-sfc: ensure css custom properties do not start with a digit (#​13870) (9c27951)
• compiler-sfc: ensure props bindings register before compiling template (#​13922) (abd5638), closes #​13920
• compiler-ssr: ensure v-show has a higher priority in SSR (#​12171) (836b829), closes #​12162
• custom-element: properly mount multiple Teleports in custom element component w/ shadowRoot false (#​13900) (5e1e791), closes #​13899
• custom-element: set prop runs pending mutations before disconnect (#​13897) (c4a88cd), closes #​13315
• custom-element: use PatchFlags.BAIL for slot when props are present (#​13907) (5358bca), closes #​13904
• reactivity: respect readonly during ref unwrapping (#​13905) (aba7fed), closes #​13903
• reactivity: update iterator to check for completion instead of value presence (#​13761) (2078f8b)
• runtime-core: simplify block-tracking disabling in h helper (#​13841) (75220c7)
• transition-group: run forceReflow on the correct document (fix #​13849) (#​13853) (1be5ddf)
• types: more precise types for Events and added missing definitions (#​9675) (8bb8fb2)
• types: set dom stub type to never instead of {} (#​13915) (8620a61), closes #​11564
• types: widen directive arg type from string to any (#​13758) (4b71706), closes #​13757

Features

• custom-element: allow specifying additional options for shadowRoot in custom elements (#​12965) (47e628d), closes #​12964

Reverts

• Revert "fix(hmr): prevent VUE_HMR_RUNTIME from being overwritten by vue runtime in 3rd-party libraries" (#​13925) (6b68f72), closes #​13925

---

Configuration

📅 Schedule: Branch creation - "after 2am and before 3am" (UTC), Automerge - "after 1am and before 2am" (UTC).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

ℹ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 1 additional dependency was updated

Details:

Package	Change
github.com/ebitengine/purego	v0.8.4 -> v0.9.0