chore(deps): update all non-major dependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
better-sqlite3	^12.8.0 → ^12.10.0
docus	^5.9.0 → ^5.11.0
pnpm (source)	11.1.0 → 11.1.1
pnpm (source)	10.33.0 → 10.33.4
typescript (source)	5.6.3 → 5.9.3

---

Release Notes

WiseLibs/better-sqlite3 (better-sqlite3)

v12.10.0

Compare Source

What's Changed

• Update SQLite to version 3.53.1 by @​JoshuaWise in #​1467
• Add support for Node.js v26 prebuilds and remove EOL builds (Node.js v20, v23) by @​m4heshd in #​1468
• Temporarily rollback support for Electron v42 prebuilds by @​m4heshd in #​1470
• Enable percentile functions by @​Maxime-J in #​1447

Full Changelog: WiseLibs/better-sqlite3@v12.9.1...v12.10.0

v12.9.0

Compare Source

What's Changed

• Update SQLite to version 3.53.0 in #​1464

Full Changelog: WiseLibs/better-sqlite3@v12.8.0...v12.9.0

nuxt-content/docus (docus)

v5.11.0

Compare Source

Features

• css: add support for app/app.css to avoid duplicate tailwind (#​1364) (98f68d5)
• layer: set ContentTOC default variant to circuit (#​1360) (7d90d20)
• toc: improve main grid to make it wider (#​1363) (45c65cc)

Bug Fixes

• css: don't use @​layer base for prod hydration (73606b7)
• layer: incorrect MCP tools when app.baseURL is set (#​1361) (f7e42eb)
• mcp: respect mcp.route in page header dropdown (#​1362) (5c36cd4)

v5.10.1

Compare Source

Bug Fixes

• ai: make sure to set markdown headers as response (#​1348) (cc0fc5b)
• assistant: use internal fetch for MCP on workers (#​1309) (596d027)

v5.10.0

Compare Source

Features

• customization: add AppHeaderLeft component (#​1332) (313ef59)
• layer: forward app config defaultVariants to subcomponents (#​1338) (8abf0d4)
• skills: make directory configurable via module options (#​1341) (764329f)

Bug Fixes

• .starters: accurate folder prefix (#​1334) (ff036f9)
• build: remove noisy vite warns (#​1344) (a95607a)
• i18n: add Dutch (nl) locales for assistant UI (#​1335) (965850f)
• i18n: add missing locale keys (#​1336) (3dd3e18)

pnpm/pnpm (pnpm)

v11.1.1

Compare Source

Patch Changes

• Skip installability validation when scanning workspace projects in checkDepsStatus (run by verifyDepsBeforeRun). Previously the status check called findWorkspaceProjects, which validates each project's engines and os/cpu/libc and warns about useless fields in non-root manifests — work that the install pipeline already performs. With no nodeVersion threaded through, the engine check also fell back to the system Node from PATH and emitted spurious "Unsupported engine" warnings before scripts ran. Status-only callers now use findWorkspaceProjectsNoCheck; install paths continue to validate.
• Fixed pnpm add <alias>:@&#8203;scope/pkg for named registries. The local resolver was claiming any specifier containing / as a local directory, so pnpm add bit:@​teambit/bit (with bit configured under namedRegistries) installed a bogus link to bit:@​teambit/bit/ instead of resolving from the configured registry. The local resolver now runs after the named-registry resolver in the resolution chain.
• Updated @zkochan/cmd-shim to 9.0.3. The sh shim it writes for .cmd / .bat targets now escapes the /C switch as //C, so it survives the path translation Git Bash applies when launching cmd.exe. Without this, a bare /C was rewritten to C:\ before reaching cmd.exe — the switch was dropped, cmd started interactively, and the calling script saw the cmd banner instead of the wrapped command's output. Affects any cmd-shim-wrapped batch script invoked from Git Bash / MSYS / Cygwin on Windows. See pnpm/cmd-shim#55.

microsoft/TypeScript (typescript)

v5.9.3: TypeScript 5.9.3

Compare Source

Note: this tag was recreated to point at the correct commit. The npm package contained the correct content.

For release notes, check out the release announcement

• fixed issues query for Typescript 5.9.0 (Beta).
• fixed issues query for Typescript 5.9.1 (RC).
• No specific changes for TypeScript 5.9.2 (Stable)
• fixed issues query for Typescript 5.9.3 (Stable).

Downloads are available on:

• npm

v5.9.2: TypeScript 5.9

Compare Source

Note: this tag was recreated to point at the correct commit. The npm package contained the correct content.

For release notes, check out the release announcement

• fixed issues query for Typescript 5.9.0 (Beta).
• fixed issues query for Typescript 5.9.1 (RC).
• No specific changes for TypeScript 5.9.2 (Stable)

Downloads are available on:

• npm

v5.8.3: TypeScript 5.8.3

Compare Source

Note: this tag was recreated to point at the correct commit. The npm package contained the correct content.

For release notes, check out the release announcement.

• fixed issues query for Typescript 5.8.0 (Beta).
• fixed issues query for Typescript 5.8.1 (RC).
• fixed issues query for Typescript 5.8.2 (Stable).
• fixed issues query for Typescript 5.8.3 (Stable).

Downloads are available on:

• npm

v5.8.2: TypeScript 5.8

Compare Source

For release notes, check out the release announcement.

• fixed issues query for Typescript 5.8.0 (Beta).
• fixed issues query for Typescript 5.8.1 (RC).
• fixed issues query for Typescript 5.8.2 (Stable).

Downloads are available on:

• npm

v5.7.3: TypeScript 5.7.3

Compare Source

For release notes, check out the release announcement.

• fixed issues query for Typescript 5.7.0 (Beta).
• fixed issues query for Typescript 5.7.1 (RC).
• fixed issues query for Typescript 5.7.2 (Stable).
• fixed issues query for Typescript 5.7.3 (Stable).

Downloads are available on npm

v5.7.2: TypeScript 5.7

Compare Source

For release notes, check out the release announcement.

• fixed issues query for Typescript 5.7.0 (Beta).
• fixed issues query for Typescript 5.7.1 (RC).
• fixed issues query for Typescript 5.7.2 (Stable).

Downloads are available on:

• npm

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • "on Monday"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
supabase	Ready	Preview	May 12, 2026 1:09pm
supabase-demo	Ready	Preview	May 12, 2026 1:09pm

[pkg-pr-new]

npm i https://pkg.pr.new/@nuxtjs/supabase@584

commit: 85b6482

[felixgabler]

@larbish sorry to tag you directly, but this Renovate PR includes two bug fixes that are worth merging sooner rather than later:

1. @supabase/ssr 0.8.1+ adds skipAutoInitialize: true to createServerClient, which prevents the SSR token-refresh race condition where cookies.set() throws after the response has already been committed (fix: use skipAutoInitialize to prevent SSR token refresh race condition supabase/ssr#131).

2. @supabase/supabase-js 2.98.0+ fixes auth calls hanging indefinitely when a Web Lock gets orphaned (e.g. tab backgrounded in Chrome, or React Strict Mode double-mount). It now uses a steal-based fallback so getUser() / signInWithPassword() recover instead of deadlocking (@supabase/ssr browser client auth methods hang indefinitely due to orphaned Web Locks supabase/supabase-js#2111).

Both of these are issues people hit in production. Build CI passes, the Vercel docs deployment failure looks pre-existing and unrelated.