Update patch-dependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
@types/react-dom (source)	18.3.5 -> 18.3.6
cytoscape (source)	3.31.1 -> 3.31.2
daisyui (source)	5.0.9 -> 5.0.12
esbuild	0.25.1 -> 0.25.2
react-router-dom (source)	7.4.0 -> 7.4.1
ts-jest (source)	29.3.0 -> 29.3.1
vite (source)	6.2.4 -> 6.2.5
org.jacoco:jacoco-maven-plugin (source)	0.8.12 -> 0.8.13
org.apache.maven.plugins:maven-failsafe-plugin	3.5.2 -> 3.5.3
org.apache.maven.plugins:maven-surefire-plugin	3.5.2 -> 3.5.3
io.quarkus:quarkus-bom	3.21.0 -> 3.21.1
io.quarkus:quarkus-maven-plugin	3.21.0 -> 3.21.1

---

Release Notes

cytoscape/cytoscape.js (cytoscape)

v3.31.2

Compare Source

Release version v3.31.2

saadeghi/daisyui (daisyui)

v5.0.12

Compare Source

Bug Fixes

• icon position of date input inside input wrapper on chromium-based (#​3725) closes: #​3708 (b1560a6)

v5.0.11

Compare Source

Bug Fixes

• card image-full radius color bleed. closes: #​3734 (d6fb204)

v5.0.10

Compare Source

Bug Fixes

• :not(:has()) selectors getting prefix. closes: #​3739 (771b6eb)

evanw/esbuild (esbuild)

v0.25.2

Compare Source

• Support flags in regular expressions for the API (#​4121)

  The JavaScript plugin API for esbuild takes JavaScript regular expression objects for the filter option. Internally these are translated into Go regular expressions. However, this translation previously ignored the flags property of the regular expression. With this release, esbuild will now translate JavaScript regular expression flags into Go regular expression flags. Specifically the JavaScript regular expression /\.[jt]sx?$/i is turned into the Go regular expression `(?i)\.[jt]sx?$` internally inside of esbuild's API. This should make it possible to use JavaScript regular expressions with the i flag. Note that JavaScript and Go don't support all of the same regular expression features, so this mapping is only approximate.

• Fix node-specific annotations for string literal export names (#​4100)

  When node instantiates a CommonJS module, it scans the AST to look for names to expose via ESM named exports. This is a heuristic that looks for certain patterns such as exports.NAME = ... or module.exports = { ... }. This behavior is used by esbuild to "annotate" CommonJS code that was converted from ESM with the original ESM export names. For example, when converting the file export let foo, bar from ESM to CommonJS, esbuild appends this to the end of the file:

  // Annotate the CommonJS export names for ESM import in node:
  0 && (module.exports = {
    bar,
    foo
  });

  However, this feature previously didn't work correctly for export names that are not valid identifiers, which can be constructed using string literal export names. The generated code contained a syntax error. That problem is fixed in this release:

  // Original code
  let foo
  export { foo as "foo!" }
  
  // Old output (with --format=cjs --platform=node)
  ...
  0 && (module.exports = {
    "foo!"
  });
  
  // New output (with --format=cjs --platform=node)
  ...
  0 && (module.exports = {
    "foo!": null
  });

• Basic support for index source maps (#​3439, #​4109)

  The source map specification has an optional mode called index source maps that makes it easier for tools to create an aggregate JavaScript file by concatenating many smaller JavaScript files with source maps, and then generate an aggregate source map by simply providing the original source maps along with some offset information. My understanding is that this is rarely used in practice. I'm only aware of two uses of it in the wild: ClojureScript and Turbopack.

  This release provides basic support for indexed source maps. However, the implementation has not been tested on a real app (just on very simple test input). If you are using index source maps in a real app, please try this out and report back if anything isn't working for you.

  Note that this is also not a complete implementation. For example, index source maps technically allows nesting source maps to an arbitrary depth, while esbuild's implementation in this release only supports a single level of nesting. It's unclear whether supporting more than one level of nesting is important or not given the lack of available test cases.

  This feature was contributed by @​clyfish.

remix-run/react-router (react-router-dom)

v7.4.1

Compare Source

Patch Changes

• Updated dependencies:
  • react-router@7.4.1

kulshekhar/ts-jest (ts-jest)

v29.3.1

Compare Source

Bug Fixes

• fix: allow isolatedModules mode to have ts.Program under Node16/Next (25157eb)
• fix: improve message for isolatedModules of ts-jest config (547eb6f)

vitejs/vite (vite)

v6.2.5

Compare Source

Please refer to CHANGELOG.md for details.

jacoco/jacoco (org.jacoco:jacoco-maven-plugin)

v0.8.13: 0.8.13

Compare Source

New Features

• JaCoCo now officially supports Java 23 and Java 24 (GitHub #​1757, #​1631, #​1867).
• Experimental support for Java 25 class files (GitHub #​1807).
• Calculation of line coverage for Kotlin inline functions (GitHub #​1670).
• Calculation of line coverage for Kotlin inline functions with reified type parameter (GitHub #​1670, #​1700).
• Calculation of coverage for Kotlin JvmSynthetic functions (GitHub #​1700).
• Part of bytecode generated by the Kotlin Compose compiler plugin is filtered out during generation of report (GitHub #​1616).
• Part of bytecode generated by the Kotlin compiler for inline value classes is filtered out during generation of report (GitHub #​1475).
• Part of bytecode generated by the Kotlin compiler for suspending lambdas without suspension points is filtered out during generation of report (GitHub #​1283).
• Part of bytecode generated by the Kotlin compiler for when expressions and statements with nullable enum subject is filtered out during generation of report (GitHub #​1774).
• Part of bytecode generated by the Kotlin compiler for when expressions and statements with nullable String subject is filtered out during generation of report (GitHub #​1769).
• Part of bytecode generated by the Kotlin compiler for chains of safe call operators is filtered out during generation of report (GitHub #​1810, #​1818).
• Method getEntries generated by the Kotlin compiler for enum classes is filtered out during generation of report (GitHub #​1625).
• Methods generated by the Kotlin compiler for constructors and functions with JvmOverloads annotation are filtered out (GitHub #​1768).

Fixed bugs

• Fixed interpretation of Kotlin SMAP (GitHub #​1525).
• File extensions are preserved in HTML report in case of clashes of normalized file names (GitHub #​1660).

Non-functional Changes

• JaCoCo build now uses Maven Wrapper and requires at least Maven 3.9.9 (GitHub #​1708, #​1707, #​1681).
• JaCoCo now depends on ASM 9.8 (GitHub #​1862).
• More context information when IllegalArgumentException occurs during reading of zip file (GitHub #​1833).

quarkusio/quarkus (io.quarkus:quarkus-bom)

v3.21.1

Compare Source

Major changes

• #​46961 - Add support for TLS config reload in REST Client

Complete changelog

• #​23990 - Resources path params not not included when a Sub-Resource is filtered by @ServerRequestFilter
• #​36343 - REST Client with generic subresource fails with InvalidRestClientDefinitionException
• #​40831 - RestEasy reactive: Cannot use method with same name but different parameters
• #​43105 - Hibernate ORM - JSON mapper should be made unremovable
• #​46623 - Bump elasticsearch-opensource-components.version from 8.17.2 to 8.17.3
• #​46628 - swagger ui does not show schema examples after migration to quarkus 3.19
• #​46636 - SmallRye Fault Tolerance: add support for OpenTelemetry Metrics
• #​46652 - UnsupportedOperationException in TlsConfigUtils when setting ALPN false
• #​46669 - config-tracking output file is always "prod" file despite the chosen profile
• #​46726 - quarkus.config-tracking.file-suffix does not work as expected
• #​46858 - Problems with bom-platform for v. 3.19.3 for jUnit
• #​46870 - Use Config profiles in the config-tracking output file
• #​46872 - Fixed recordedBuildConfigFile absolute path resolution
• #​46881 - Bump wildfly-elytron.version from 2.6.1.Final to 2.6.2.Final
• #​46883 - Bump hibernate-search.version from 7.2.2.Final to 7.2.3.Final
• #​46893 - Graphql federation @Resolver and @Blocking do not work
• #​46896 - Bump Quarkiverse parent version to 19
• #​46897 - Add doc about default http header methods
• #​46900 - Resolved the UnsupportedOperationException in TlsConfigUtils when setting ALPN false
• #​46901 - Bump smallrye-graphql.version from 2.12.1 to 2.12.2
• #​46906 - Bump com.google.guava:guava from 33.4.0-jre to 33.4.5-jre
• #​46910 - Expand note about dependency needed for Kotlin and gRPC
• #​46918 - Return locators path parameters in UriInfo
• #​46930 - SmallRye GraphQL - Allow execution model annotations on @Resolver methods
• #​46931 - Downgrading mockito.version to 5.12.0 as it is compatible with junit.jupiter.version 5.10.5
• #​46940 - Make ObjectMapper/JsonbProducer unremovable if json mapper is required by ORM
• #​46943 - Add clarifying sentence to maturity matrix guide
• #​46944 - Add some additional doc to HeaderConfig#methods()
• #​46956 - OpenAPI: disable example merging by default (Swagger UI regression)
• #​46957 - Fix native security extension build failure over missing BouncyCastle class
• #​46961 - Add support for TLS config reload in REST Client
• #​46963 - Document that the Hibernate Reactive extension doesn't support database-based multitenancy or schema-based multitenancy
• #​46966 - Correctly handle trust managers when no trust manager matching the SNI name can be found
• #​46967 - DevUI Database view does not work with inactive data sources
• #​46968 - [Mandrel/GraalVM for JDK 25+14] kafka-sasl native integration test fails with MissingResourceException
• #​46970 - Fix container binary strategy returning with non-zero exit code
• #​46972 - OIDC -Azure refresh token doesnt have expiration date
• #​46979 - Dev UI Agroal: Make sure to handle disabled datasources
• #​46980 - Qute template validation error when using template records with fragments
• #​46981 - Remove erroneously left over request context call in test
• #​46984 - Fix text on gradle tooling doc
• #​46985 - Qute: ignore type-safe fragments for param declarations
• #​46989 - Websocket next - default serialization does not work on native
• #​46991 - Fix the OIDC opaque token check
• #​46995 - Corrects Infinispan documentation
• #​47000 - add missing @UnwrapException in quarkus-rest doc example
• #​47001 - Fix constructor search for Qute template records
• #​47007 - [3.21] Change in smallrye-config causes application to not start
• #​47010 - Quarkus CLI issues WARNINGs for unrecognized .env values in dev mode
• #​47015 - Register classes for reflection in amazon lambda and funqy
• #​47018 - Bump elasticsearch-opensource-components.version from 8.17.3 to 8.17.4
• #​47019 - Bump com.google.guava:guava from 33.4.5-jre to 33.4.6-jre
• #​47021 - Grpc Client in Tests fail when Running on Linux with Netty Native Transports
• #​47025 - Only set eventLoopGroup on GRPC if native transports not enabled
• #​47027 - Register text message types for reflection
• #​47029 - Update rest-client.adoc line 183
• #​47031 - OpenTelemetry: disabling tracing while keeping metrics enabled leads to UnsatisfiedResolutionException
• #​47032 - quarkus-tls-registry 'javax.net.ssl' causes "java.lang.IllegalStateException: No CN or OU in O=xxx,C=xxx" and crashs quarkus application starts
• #​47041 - Keep a reference on the parent/original context to allow accessing it from Rest Client interceptors
• #​47042 - Update SmallRye Config to 3.12.4
• #​47043 - Register resource bundle sun.security.util.resources.security for kafka in native mode
• #​47047 - Support type variables on sub resource interfaces for the rest client
• #​47049 - quarkus-tls-registry 'javax.net.ssl' causes "java.lang.IllegalStateException: No CN or OU in O=xxx,C=xxx" and crashs quarkus application starts
• #​47053 - Bump org.mariadb.jdbc:mariadb-java-client from 3.5.2 to 3.5.3
• #​47057 - Make OTel resource attributes signal independent
• #​47062 - Constructor injection of io.opentelemetry.api.metrics.Meter in a @GrpcService-annotated class makes tests fail
• #​47065 - Fix ClassCastException when ResourceMethod with same method name exist
• #​47076 - Ensure gRPC server starts after Otel is configured (if applicable)
• #​47097 - Prevent config diagnostic warnings from quarkus CLI itself
• #​47098 - Rabbitmq connector can't be used with TLS registry
• #​47099 - Adds RabbitmqClientConfigCustomizer as unremovable bean
• #​47103 - Adding buildpack config options to container image docs

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

• any of the package files in this branch needs updating, or
• the branch becomes conflicted, or
• you click the rebase/retry checkbox if found above, or
• you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: package-lock.json

npm warn Unknown env config "store". This will stop working in the next major version of npm.
npm error code EOVERRIDE
npm error Override for esbuild@0.25.2 conflicts with direct dependency
npm error A complete log of this run can be found in: /runner/cache/others/npm/_logs/2025-04-03T15_25_34_380Z-debug-0.log