chore: update auto merge on patch or minor

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
@inversifyjs/http-core (source)	^5.0.1 → ^5.1.0
@inversifyjs/http-express (source)	5.0.1 → 5.1.0
@inversifyjs/http-fastify (source)	5.0.1 → 5.1.0
@vitest/coverage-v8 (source)	4.1.0 → 4.1.1
fastify (source)	5.8.2 → 5.8.4
knip (source)	6.0.1 → 6.0.4
vitest (source)	4.1.0 → 4.1.1
ws	^8.19.0 → ^8.20.0

---

Release Notes

inversify/monorepo (@​inversifyjs/http-core)

v5.1.0

Compare Source

Minor Changes

• Added createRouteValueMetadataUtils
• Added createRouteValueMetadataUtils.
• Added routeValueMetadata.
• Added routeValueMetadataSymbol.

vitest-dev/vitest (@​vitest/coverage-v8)

v4.1.1

Compare Source

   🚀 Features

• experimental:
  • Expose matchesTagsFilter to test if the current filter matches tags  -  by @​sheremet-va in #​9913 (eec53)
  • Introduce experimental.vcsProvider  -  by @​sheremet-va in #​9928 (56115)

   🐞 Bug Fixes

• Mark TestProject.testFilesList internal properly  -  by @​sapphi-red in #​9867 (54f26)
• Detect fixture that returns without calling use  -  by @​oilater in #​9831 and #​9861 (633ae)
• Drop vite 8.beta support  -  by @​AriPerkkio in #​9862 (b78f5)
• Type regression in vi.mocked() static class methods  -  by @​purepear and @​hi-ogawa in #​9857 (90926)
• Properly re-evaluate actual modules of mocked external  -  by @​hi-ogawa in #​9898 (ae5ec)
• Preserve coverage report when html reporter overlaps  -  by @​hi-ogawa in #​9889 (2d81a)
• Provide vi.advanceTimers to the preview provider  -  by @​sheremet-va in #​9891 (1bc3e)
• Don't leak event listener in playwright provider  -  by @​sheremet-va in #​9910 (d9355)
• Open browser in --standalone mode without running tests  -  by @​sheremet-va in #​9911 (e78ad)
• Guard disposable and optional body  -  by @​sheremet-va in #​9912 (6fdb2)
• Resolve retry.condition RegExp serialization issue  -  by @​nstepien and @​hi-ogawa in #​9942 (7b605)
• collect:
  • Don't treat extra props on test return as tests  -  by @​sheremet-va in #​9871 (141e7)
• coverage:
  • Simplify provider types  -  by @​AriPerkkio in #​9931 (aaf9f)
  • Load built-in provider without module runner  -  by @​AriPerkkio in #​9939 (bf892)
• expect:
  • Soft assertions continue after .resolves/.rejects promise errors  -  by @​mixelburg, Maks Pikov, Claude Opus 4.6 (1M context) and @​hi-ogawa in #​9843 (6d74b)
  • Fix sinon-chai style API  -  by @​hi-ogawa in #​9943 (0f08d)
• pretty-format:
  • Limit output for large object  -  by @​hi-ogawa and Claude Opus 4.6 (1M context) in #​9949 (0d5f9)

    View changes on GitHub

fastify/fastify (fastify)

v5.8.4

Compare Source

v5.8.3

Compare Source

⚠️ Security Release

This fixes CVE CVE-2026-3635 GHSA-444r-cwp2-x5xf.

What's Changed

• docs(readme): add @​Tony133 to plugin team by @​Tony133 in #​6565
• Updated Plugins-Guide.md; Changed "fastify" to "instance" during plugin registration to showcase that it's added as a child by @​kyrylchenko in #​6566
• test: use fastify.test in test case by @​climba03003 in #​6568
• docs: use fastify.example in documentation by @​climba03003 in #​6567
• docs: add common performance degradation guidance by @​maxpetrusenko in #​6520
• docs(server): fix camelCase anchor links in TOC by @​Deepvamja in #​6530
• ci(link-checker): fix root-relative links resolution by @​barba-rossa in #​6535
• docs: update syntax markdown, absolute paths and links by @​Tony133 in #​6569
• docs: clarify content-type parser/schema mismatch is outside threat model by @​mcollina in #​6537
• docs: fix incorrect code examples in Reply and Request reference by @​mahmoodhamdi in #​6582
• docs: replace redirected npm.im http-errors link by @​mcollina in #​6588
• types: Allow port to be null in request type definition by @​TristanBarlow in #​6589
• docs: update links by @​Tony133 in #​6593
• ci(lock-threads): use shared lock-threads workflow by @​Fdawgs in #​6592

New Contributors

• @​kyrylchenko made their first contribution in #​6566
• @​maxpetrusenko made their first contribution in #​6520
• @​Deepvamja made their first contribution in #​6530
• @​barba-rossa made their first contribution in #​6535
• @​mahmoodhamdi made their first contribution in #​6582
• @​TristanBarlow made their first contribution in #​6589

Full Changelog: fastify/fastify@v5.8.2...v5.8.3

webpro-nl/knip (knip)

v6.0.4: Release 6.0.4

Compare Source

• Defer ns member ref resolution to post-walk batch pass (resolve #​1633) (304504f)
• Show namespace member statuses in trace output (47ddf43)
• Add shadow detection for function params, arrow params, and catch bindings (70ebb76)
• Strip trailing slashes from tsconfig outDir and rootDir (resolve #​1635) (1dcdb02)

v6.0.3: Release 6.0.3

Compare Source

• Handle symlinks → real paths from tsconfig files (#​1630) (529810a)
• Filter empty strings from Qwik routesDir values (resolve #​1632) (beb8ae3)
• Release knip@​6.0.3 (278f44a)

v6.0.2: Release 6.0.2

Compare Source

• Add scope-aware shadow detection to fix false negatives from name-based matching (9ec38b3)
• Fix false negatives from overly broad collectRefsInType (261bd06)
• Add doc re. exports (f82d3ad)
• Bump get-tsconfig to 4.13.7, remove patch (resolve #​1630) (09bbce5)
• Pass on rootDirs to work around oxc-resolver feature gap (resolve #​1628) (4dc16cc)
• Update patches (836c2cf)
• Release knip@​6.0.2 (2dd9068)

websockets/ws (ws)

v8.20.0

Compare Source

Features

• Added exports for the PerMessageDeflate class and utilities for the
  Sec-WebSocket-Extensions and Sec-WebSocket-Protocol headers (d3503c1).

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[changeset-bot]

⚠️ No Changeset found

Latest commit: 198a575

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR