chore(deps): lock file maintenance

[renovate]

This PR contains the following updates:

Update	Change
lockFileMaintenance	All locks refreshed

🔧 This Pull Request updates lock files to use the latest dependency versions.

---

Configuration

📅 Schedule: (in timezone Africa/Johannesburg)

• Branch creation
  • "before 5am on monday"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[socket-security]

All alerts resolved. Learn more about Socket for GitHub.

This PR previously contained dependency changes with security issues that have been resolved, removed, or ignored.

View full report

[github-actions]

⚡ Benchmark Results

benchmarks/renderer/ring-buffer.bench.ts

Suite — Benchmark	ops/sec	mean (µs)	p99 (µs)	±rme	vs main
SharedRingBuffer – small payload (64 B) — write 64 bytes	675.7 K	0.0015	0.0052	±0.72%	+24.5% 🚀
SharedRingBuffer – small payload (64 B) — write + read 64 bytes	554.1 K	0.0018	0.0066	±0.94%	+5.3%
SharedRingBuffer – medium payload (1 KB) — write 1 KB	408.3 K	0.0024	0.0103	±0.48%	+17.6% 🚀
SharedRingBuffer – medium payload (1 KB) — write + read 1 KB	272.2 K	0.0037	0.0114	±16.50%	+4.7%
SharedRingBuffer – large payload (16 KB) — write 16 KB	45.7 K	0.0219	0.0410	±0.56%	-21.5% ⚠️
SharedRingBuffer – large payload (16 KB) — write + read 16 KB	140.0 K	0.0071	0.0295	±1.60%	+81.7% 🚀
SharedRingBuffer – sequential throughput (100 × 64 B) — 100 write + read cycles	56.1 K	0.0178	0.0730	±0.71%	+38.1% 🚀
SharedRingBuffer – introspection — availableToRead	19.17 M	0.0001	0.0001	±0.09%	+28.9% 🚀
SharedRingBuffer – introspection — isEmpty	19.21 M	0.0001	0.0001	±0.09%	+31.4% 🚀
SharedRingBuffer – introspection — isFull	19.04 M	0.0001	0.0001	±0.10%	+30.6% 🚀

benchmarks/renderer/shared-buffer.bench.ts

Suite — Benchmark	ops/sec	mean (µs)	p99 (µs)	±rme	vs main
SharedBuffer – allocation — createSharedBuffer(4 KB)	747.1 K	0.0013	0.0052	±1.02%	+4.7%
SharedBuffer – allocation — createSharedBuffer(64 KB)	58.2 K	0.0172	0.0358	±1.11%	+3.2%
SharedBuffer – small payload round-trip — write small JSON	373.3 K	0.0027	0.0097	±0.34%	+3.9%
SharedBuffer – small payload round-trip — write + read small JSON	306.1 K	0.0033	0.0093	±0.36%	+11.9% 🚀
SharedBuffer – medium payload round-trip — write medium JSON (~2 KB)	120.4 K	0.0083	0.0202	±4.43%	+35.2% 🚀
SharedBuffer – medium payload round-trip — write + read medium JSON (~2 KB)	73.0 K	0.0137	0.0295	±0.36%	+25.2% 🚀
SharedBuffer – large payload round-trip — write large JSON (~10 KB)	20.1 K	0.0498	0.0772	±0.31%	+30.2% 🚀
SharedBuffer – large payload round-trip — write + read large JSON (~10 KB)	10.3 K	0.0970	0.1172	±0.30%	+31.9% 🚀

benchmarks/utils/ip-address.bench.ts

Suite — Benchmark	ops/sec	mean (µs)	p99 (µs)	±rme	vs main
getClientIPAddress – no IP headers — no IP-related headers → null	3.55 M	0.0003	0.0004	±0.18%	+34.3% 🚀
getClientIPAddress – single header — cf-connecting-ip (Cloudflare)	2.01 M	0.0005	0.0008	±0.30%	+20.3% 🚀
getClientIPAddress – single header — x-forwarded-for (simple)	2.32 M	0.0004	0.0007	±0.31%	+20.2% 🚀
getClientIPAddress – single header — x-real-ip	1.80 M	0.0006	0.0009	±0.29%	+20.0% 🚀
getClientIPAddress – single header — true-client-ip (Akamai / Cloudflare Enterprise)	1.81 M	0.0006	0.0008	±2.70%	+17.3% 🚀
getClientIPAddress – x-forwarded-for multi-hop — 2-hop chain	2.28 M	0.0004	0.0007	±1.12%	+30.6% 🚀
getClientIPAddress – x-forwarded-for multi-hop — 4-hop chain	2.03 M	0.0005	0.0008	±1.04%	+21.4% 🚀
getClientIPAddress – Forwarded header (RFC 7239) — simple for= directive	1.21 M	0.0008	0.0013	±1.16%	+19.4% 🚀
getClientIPAddress – Forwarded header (RFC 7239) — for= with port	907.4 K	0.0011	0.0017	±0.93%	+24.4% 🚀
getClientIPAddress – Forwarded header (RFC 7239) — IPv6 literal	924.5 K	0.0011	0.0017	±0.32%	+21.5% 🚀
getClientIPAddress – Forwarded header (RFC 7239) — multi-hop Forwarded	1.01 M	0.0010	0.0016	±0.32%	+19.4% 🚀
getClientIPAddress – IPv6 addresses — x-forwarded-for IPv6	1.41 M	0.0007	0.0011	±2.08%	+22.7% 🚀

benchmarks/utils/promise.bench.ts

Suite — Benchmark	ops/sec	mean (µs)	p99 (µs)	±rme	vs main
promiseHash – concurrent resolution — 2 already-resolved promises	1.11 M	0.0009	0.0018	±0.71%	+29.6% 🚀
promiseHash – concurrent resolution — 5 already-resolved promises	601.2 K	0.0017	0.0023	±1.13%	+14.7% 🚀
promiseHash – concurrent resolution — 10 already-resolved promises	349.6 K	0.0029	0.0038	±0.96%	+22.6% 🚀
promiseHash – concurrent resolution — 5 promises with object values	527.2 K	0.0019	0.0028	±0.33%	+8.5%
timeout – wrapping fast promises — timeout wrapping an already-resolved promise (1 s budget)	1.11 M	0.0009	0.0015	±0.38%	+14.9% 🚀
timeout – wrapping fast promises — timeout wrapping an already-resolved object (5 s budget)	945.9 K	0.0011	0.0027	±4.77%	+1.2%

benchmarks/utils/safe-redirect.bench.ts

Suite — Benchmark	ops/sec	mean (µs)	p99 (µs)	±rme	vs main
safeRedirect – valid paths — root path /	10.07 M	0.0001	0.0002	±0.21%	+48.9% 🚀
safeRedirect – valid paths — simple path /dashboard	5.10 M	0.0002	0.0003	±0.15%	+41.0% 🚀
safeRedirect – valid paths — nested path /settings/profile	4.48 M	0.0002	0.0003	±0.09%	+40.3% 🚀
safeRedirect – valid paths — path with query string /search?q=hello	4.80 M	0.0002	0.0002	±0.09%	+37.4% 🚀
safeRedirect – valid paths — path with hash /docs#section	4.89 M	0.0002	0.0002	±0.20%	+36.2% 🚀
safeRedirect – rejected inputs — absolute URL https://evil.com	6.32 M	0.0002	0.0002	±0.09%	+37.1% 🚀
safeRedirect – rejected inputs — protocol-relative URL //evil.com	6.19 M	0.0002	0.0002	±0.09%	+37.5% 🚀
safeRedirect – rejected inputs — backslash-relative /\evil.com	6.38 M	0.0002	0.0002	±0.11%	+37.7% 🚀
safeRedirect – rejected inputs — path traversal /../etc/passwd	5.55 M	0.0002	0.0002	±0.09%	+34.9% 🚀
safeRedirect – rejected inputs — null input	19.67 M	0.0001	0.0001	±0.09%	+21.3% 🚀
safeRedirect – rejected inputs — undefined input	19.50 M	0.0001	0.0001	±0.09%	+20.4% 🚀
safeRedirect – rejected inputs — empty string	19.58 M	0.0001	0.0001	±0.09%	+20.9% 🚀
safeRedirect – percent-encoded bypass — percent-encoded // (%2F%2F)	6.02 M	0.0002	0.0002	±0.10%	+26.7% 🚀
safeRedirect – percent-encoded bypass — percent-encoded path traversal (%2e%2e)	6.33 M	0.0002	0.0002	±0.09%	+33.2% 🚀
safeRedirect – percent-encoded bypass — mixed percent-encoded absolute URL	5.82 M	0.0002	0.0002	±0.09%	+27.1% 🚀
safeRedirect – custom default redirect — valid path with custom default	5.18 M	0.0002	0.0002	±0.22%	+38.3% 🚀
safeRedirect – custom default redirect — invalid input with custom default	6.33 M	0.0002	0.0002	±0.08%	+31.7% 🚀

🔬 Compared against the latest benchmark run on main. ⚠️ = >10% slower · 🚀 = >10% faster.

[github-actions]

📚 Docs preview deployed

https://scratchyjs-docs-pr-87.asjas.workers.dev

Updates automatically on every push to this PR.