chore(deps-dev): bump the development-dependencies group across 1 directory with 5 updates

[dependabot]

Bumps the development-dependencies group with 5 updates in the / directory:

Package	From	To
@electric-sql/pglite	0.5.4	0.5.5
@next/playwright	16.3.0	16.3.1
@types/pg	8.21.0	8.23.1
shadcn	4.16.2	4.18.0
vitest	4.1.10	4.1.11

Updates @electric-sql/pglite from 0.5.4 to 0.5.5

Release notes

Sourced from @​electric-sql/pglite's releases.

@​electric-sql/pglite-prepopulatedfs@​0.5.5

Patch Changes

• Updated dependencies [a290741]
• Updated dependencies [6b6f28d]
• Updated dependencies [354f4ae]
• Updated dependencies [219af1e]
• Updated dependencies [20839a7]
• Updated dependencies [7e784a4]
  • @​electric-sql/pglite@​0.5.5

@​electric-sql/pglite@​0.5.5

Patch Changes

• a290741: Reset retained protocol parser state after a malformed backend message so later queries can recover.
• 6b6f28d: Fix PGlite.create({ fs }) on a fresh database calling the provided filesystem's init() twice: the inner initdb instance no longer inherits the user-provided fs and always runs on its own scratch filesystem. Previously any VFS holding exclusive resources (e.g. OPFS sync access handles) failed with a contention error on first create.
• 354f4ae: Fix formatQuery (used by live.query/live.incrementalQuery to inline parameters) emitting %NL instead of the positional %N$L format specifier. A bare %NL is "min width N" and consumes format() arguments sequentially, so placeholders that are out of textual order silently bound the wrong values, and repeated placeholders failed with too few arguments for format().
• 219af1e: Expose the fields node-postgres derives from the CommandComplete command tag on Results: command (e.g. SELECT, INSERT, CREATE), and rowCount (the per-statement count from the tag). The tag was already received and parsed internally to compute affectedRows, but these values were not surfaced. Matching node-postgres' command/rowCount result fields lets pg-compatible adapters report them without re-parsing SQL.
• 20839a7: Preserve the host process.exitCode when closing a PGlite instance. close() calls _emscripten_force_exit(0), whose Emscripten runtime sets process.exitCode = 0, clobbering any exit code the host process had already set. This mirrors the existing save/restore guards in #init() and execProtocolRaw(), so closing a database no longer silently resets the host process's exit code.
• 7e784a4: Reject operations performed through transaction handles after the transaction has closed.

Changelog

Sourced from @​electric-sql/pglite's changelog.

0.5.5

Patch Changes

• a290741: Reset retained protocol parser state after a malformed backend message so later queries can recover.
• 6b6f28d: Fix PGlite.create({ fs }) on a fresh database calling the provided filesystem's init() twice: the inner initdb instance no longer inherits the user-provided fs and always runs on its own scratch filesystem. Previously any VFS holding exclusive resources (e.g. OPFS sync access handles) failed with a contention error on first create.
• 354f4ae: Fix formatQuery (used by live.query/live.incrementalQuery to inline parameters) emitting %NL instead of the positional %N$L format specifier. A bare %NL is "min width N" and consumes format() arguments sequentially, so placeholders that are out of textual order silently bound the wrong values, and repeated placeholders failed with too few arguments for format().
• 219af1e: Expose the fields node-postgres derives from the CommandComplete command tag on Results: command (e.g. SELECT, INSERT, CREATE), and rowCount (the per-statement count from the tag). The tag was already received and parsed internally to compute affectedRows, but these values were not surfaced. Matching node-postgres' command/rowCount result fields lets pg-compatible adapters report them without re-parsing SQL.
• 20839a7: Preserve the host process.exitCode when closing a PGlite instance. close() calls _emscripten_force_exit(0), whose Emscripten runtime sets process.exitCode = 0, clobbering any exit code the host process had already set. This mirrors the existing save/restore guards in #init() and execProtocolRaw(), so closing a database no longer silently resets the host process's exit code.
• 7e784a4: Reject operations performed through transaction handles after the transaction has closed.

Commits

• 0ad2901 Version Packages (#1069)
• 219af1e node-postgres compat: add rowCount and command (#1067)
• 354f4ae fix: bind formatQuery params by position, not textual order (#1056)
• 6b6f28d fix: don't leak a user-provided fs into the inner initdb instance (#1060)
• 7e784a4 fix: reject operations on closed transaction handles (#1062)
• 20839a7 fix: preserve host process.exitCode when closing PGlite (#1059)
• 8b33b92 fix(live): resolve variable shadowing in unsubscribe callback filtering (#1051)
• 9dac42c Add moddatetime extension support (#1061)
• See full diff in compare view

Updates @next/playwright from 16.3.0 to 16.3.1

Release notes

Sourced from @​next/playwright's releases.

v16.3.1

What's Changed

• [16.x] Turbopack: don't strip async-module runtime from shared runtime chunks by @​lukesandberg in vercel/next.js#96653
• [16.x] [turbopack] Add turbopack_ecmascript and turbopack_wasm's embeded FS to internal_assets_conditions by @​lukesandberg in vercel/next.js#96655
• [16.x] [turbopack] Collapse nested promises in the analyzer by @​sampoder in vercel/next.js#96675
• [16.x] fix(next/image): preserve image response after optimization by @​styfle in vercel/next.js#96733
• [16.3.x] Default deploy e2e tests to the repo next version by @​eps1lon in vercel/next.js#96900
• [backport] Bump @​swc/helpers by @​mischnic in vercel/next.js#96885
• [backport] [turbopack] Raise registration calls in hoisted modules to the top by @​lukesandberg in vercel/next.js#97308
• [backport] Fix missing styled-jsx styles in Pages Router SSR on adapter builds by @​lukesandberg in vercel/next.js#97302
• [backport] [turbopack] Fix HMR for dynamic imports evaluated from layouts by @​lukesandberg in vercel/next.js#97317
• [backport] Restore the live headers() view of the incoming request by @​unstubbable in vercel/next.js#97311
• [backport] Allow literal exports in 'use cache' files by @​unstubbable in vercel/next.js#97312
• [backport] Keep the dev validation worker alive across HMR updates by @​unstubbable in vercel/next.js#97315
• [backport] Discard only cache entries that predate a tag revalidation, and reuse completed entries by @​unstubbable in vercel/next.js#97314
• [backport] Encode the cache item name built by unstable_cache by @​unstubbable in vercel/next.js#97313
• [16.3] [ci] Use OIDC tokens to read private preview builds by @​eps1lon in vercel/next.js#97258
• [backport] [test] Compile the middleware redirect routes up front in dev by @​lukesandberg in vercel/next.js#97328
• [backport] Fix Nav Inspector request loop on repeat captures by @​acdlite in vercel/next.js#97326
• [backport] Fix: Optimistic routing bugs leading to repeated prefetch loops by @​acdlite in vercel/next.js#97325
• [backport] Retain fewer stale cache versions and use a TTL, plus the mtime fallback by @​lukesandberg in vercel/next.js#97304
• [backport] Revert i18n localization change for dynamic Pages API routes (#94905) by @​gaojude in vercel/next.js#97330

Full Changelog: vercel/next.js@v16.3.0...v16.3.1

v16.3.1-canary.26

Misc Changes

• docs: document deploymentId build ID override and Pages Router skew in 16.2: #97645
• Upgrade React from eb8feb71-20260814 to eafeac09-20260819: #97636
• Turbopack: rename to use turbopack: no side effects: #94427
• refactor: move useDynamic{Route,Search}Params to reduce snapshot churn: #97360
• [PPF] unstable_navigation(): #96908
• [PPF] Scaffold unstable_navigation(): #97236
• docs: Explicit cache output description: #97548
• Improve Cache Components sync IO migration guidance: #97572
• [test] Use a non-native stub for the server externals list test: #97614
• Avoid GitHub API rate limits for create-next-app examples: #97612
• [test] Cover the prerender worker-thread backend with an addon we control: #97543
• [test] Convert the prerender-native-module suite to local fixture packages: #97542
• [test] Replace the turbopack-reports sqlite3 dependency with a local addon fixture: #97541
• [test] Drop the dead sqlite3 build approval from the sharp-basic suite: #97540
• [ci] Authenticate Turborepo remote caching with OIDC instead of a static PAT: #97590
• Remove HmrTarget: #97253
• Keep HMR instructions typed until serialization: #96569
• Serialize frozen collections by value only: #96686

Credits

... (truncated)

Commits

• 3d32eb8 v16.3.1
• See full diff in compare view

Updates @types/pg from 8.21.0 to 8.23.1

Commits

• See full diff in compare view

Updates shadcn from 4.16.2 to 4.18.0

Release notes

Sourced from shadcn's releases.

shadcn@4.18.0

Minor Changes

• #11501 aef1cdca54e8da689351cdddf959342909e45e76 Thanks @​shadcn! - merge registries from package.json and components.json, and support adding registries to package.json when components.json is not present

Patch Changes

• #11500 e66b99b14dd9c54afc434dbf5a702f170b1153b0 Thanks @​shadcn! - Skip unreadable directories during file scans instead of failing with EACCES.

• #11504 9f4e3ff26025d16a243ea03cc891c734c4cf0b59 Thanks @​shadcn! - Skip unreadable directories when resolving monorepo targets.

• #11502 87d71b3629c34f3c38a353a211ec8591c1ff1721 Thanks @​shadcn! - resolve registries declared in package.json when adding components. shadcn add, search, view and init now resolve registries from package.json in memory without persisting them to components.json

• #9248 03c45b822e60195796dfd3d2fcf7c223ff4ece86 Thanks @​Grafikart! - Fix shadcn for projects with unreadable permission files

shadcn@4.17.0

Minor Changes

• #10453 deda4df80fb350230b2fce2b575e769a90cae076 Thanks @​nbouvrette! - Add SOCKS4/SOCKS5 proxy support to the registry HTTP stack via ALL_PROXY=socks5://... (the curl convention), backed by the socks package.

  Proxy selection now goes through a createProxyDispatcher(env) factory that checks ALL_PROXY / all_proxy for a socks*:// URL before falling back to the existing HTTP/HTTPS handling. ALL_PROXY with a non-SOCKS scheme is ignored here — HTTP_PROXY / HTTPS_PROXY remain the way to configure those. Existing HTTPS_PROXY / HTTP_PROXY / NO_PROXY handling via undici.EnvHttpProxyAgent is unchanged.

Changelog

Sourced from shadcn's changelog.

4.18.0

Minor Changes

• #11501 aef1cdca54e8da689351cdddf959342909e45e76 Thanks @​shadcn! - merge registries from package.json and components.json, and support adding registries to package.json when components.json is not present

Patch Changes

• #11500 e66b99b14dd9c54afc434dbf5a702f170b1153b0 Thanks @​shadcn! - Skip unreadable directories during file scans instead of failing with EACCES.

• #11504 9f4e3ff26025d16a243ea03cc891c734c4cf0b59 Thanks @​shadcn! - Skip unreadable directories when resolving monorepo targets.

• #11502 87d71b3629c34f3c38a353a211ec8591c1ff1721 Thanks @​shadcn! - resolve registries declared in package.json when adding components. shadcn add, search, view and init now resolve registries from package.json in memory without persisting them to components.json

• #9248 03c45b822e60195796dfd3d2fcf7c223ff4ece86 Thanks @​Grafikart! - Fix shadcn for projects with unreadable permission files

4.17.0

Minor Changes

• #10453 deda4df80fb350230b2fce2b575e769a90cae076 Thanks @​nbouvrette! - Add SOCKS4/SOCKS5 proxy support to the registry HTTP stack via ALL_PROXY=socks5://... (the curl convention), backed by the socks package.

  Proxy selection now goes through a createProxyDispatcher(env) factory that checks ALL_PROXY / all_proxy for a socks*:// URL before falling back to the existing HTTP/HTTPS handling. ALL_PROXY with a non-SOCKS scheme is ignored here — HTTP_PROXY / HTTPS_PROXY remain the way to configure those. Existing HTTPS_PROXY / HTTP_PROXY / NO_PROXY handling via undici.EnvHttpProxyAgent is unchanged.

Commits

• d4fc45b chore(release): version packages (#11503)
• 9f4e3ff fix(shadcn): suppress EACCES when resolving monorepo targets (#11504)
• 87d71b3 fix(registry): resolve package.json registries when adding components (#11502)
• e66b99b fix(shadcn): suppress EACCES in remaining migration glob scans (#11500)
• aef1cdc fix(registry): merge registries from package.json and components.json (#11501)
• 03c45b8 fix(shadcn): stop throwing on unreadable files (#9248)
• efac598 chore(release): version packages (#11462)
• deda4df feat(shadcn): add SOCKS proxy support (#10453)
• See full diff in compare view

Updates vitest from 4.1.10 to 4.1.11

Release notes

Sourced from vitest's releases.

v4.1.11

   🐞 Bug Fixes

• Revive global concurrency limit for test lifecycle [backport to v4]  -  by @​sheremet-va and @​hi-ogawa in vitest-dev/vitest#10992 (5146d)
• browser:
  • Encode iframeId in tester iframe URL [backport to v4]  -  by @​sheremet-va, Pduhard and Claude Opus 4.8 in vitest-dev/vitest#10955 (10b2c)
  • Trigger playwright/chromium gc on lower disk availability [backport to v4]  -  by @​hi-ogawa, Hiroshi Ogawa and OpenCode in vitest-dev/vitest#10951 (9851d)
• mocker:
  • Restrict redirect mocks to the fs allowlist [backport to v4]  -  by @​sheremet-va in vitest-dev/vitest#10974 (fe5a1)

    View changes on GitHub

Commits

• 9bd8d46 chore: release v4.1.11 (#10995)
• 9851dbc fix(browser): trigger playwright/chromium gc on lower disk availability [back...
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[greptile-apps]

PR author is in the excluded authors list.