fix(deps): update all non-major dependencies

[renovate]

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Age	Confidence	Type	Update
@fortawesome/fontawesome-free (source)	6.6.0 → 6.7.2			devDependencies	minor
docker/login-action	v3.3.0 → v3.7.0			action	minor
docker/metadata-action	v5.5.1 → v5.10.0			action	minor
github.com/coreos/go-oidc/v3	v3.17.0 → v3.20.0			require	minor
github.com/ergochat/irc-go	v0.6.0 → v0.7.0			require	minor
github.com/getkin/kin-openapi	v0.131.0 → v0.146.0			require	minor
github.com/go-ldap/ldap/v3	v3.4.12 → v3.4.14			require	patch
github.com/oapi-codegen/runtime	v1.1.1 → v1.6.0			require	minor
github.com/urfave/cli/v3	v3.6.2 → v3.10.1			require	minor
golang.org/x/oauth2	v0.35.0 → v0.36.0			require	minor
golang.org/x/sys	v0.41.0 → v0.47.0			require	minor

---

Release Notes

FortAwesome/Font-Awesome (@​fortawesome/fontawesome-free)

v6.7.2

Compare Source

Change log available at https://fontawesome.com/docs/changelog/

v6.7.1

Compare Source

Change log available at https://fontawesome.com/docs/changelog/

v6.7.0

Compare Source

Change log available at https://fontawesome.com/docs/changelog/

docker/login-action (docker/login-action)

v3.7.0

Compare Source

• Add scope input to set scopes for the authentication token by @​crazy-max in #​912
• Add support for AWS European Sovereign Cloud ECR by @​dphi in #​914
• Ensure passwords are redacted with registry-auth input by @​crazy-max in #​911
• build(deps): bump lodash from 4.17.21 to 4.17.23 in #​915

Full Changelog: docker/login-action@v3.6.0...v3.7.0

v3.6.0

Compare Source

• Add registry-auth input for raw authentication to registries by @​crazy-max in #​887
• Bump @​aws-sdk/client-ecr to 3.890.0 in #​882 #​890
• Bump @​aws-sdk/client-ecr-public to 3.890.0 in #​882 #​890
• Bump @​docker/actions-toolkit from 0.62.1 to 0.63.0 in #​883
• Bump brace-expansion from 1.1.11 to 1.1.12 in #​880
• Bump undici from 5.28.4 to 5.29.0 in #​879
• Bump tmp from 0.2.3 to 0.2.4 in #​881

Full Changelog: docker/login-action@v3.5.0...v3.6.0

v3.5.0

Compare Source

• Support dual-stack endpoints for AWS ECR by @​Spacefish @​crazy-max in #​874 #​876
• Bump @​aws-sdk/client-ecr to 3.859.0 in #​860 #​878
• Bump @​aws-sdk/client-ecr-public to 3.859.0 in #​860 #​878
• Bump @​docker/actions-toolkit from 0.57.0 to 0.62.1 in #​870
• Bump form-data from 2.5.1 to 2.5.5 in #​875

Full Changelog: docker/login-action@v3.4.0...v3.5.0

v3.4.0

Compare Source

• Bump @​actions/core from 1.10.1 to 1.11.1 in #​791
• Bump @​aws-sdk/client-ecr to 3.766.0 in #​789 #​856
• Bump @​aws-sdk/client-ecr-public to 3.758.0 in #​789 #​856
• Bump @​docker/actions-toolkit from 0.35.0 to 0.57.0 in #​801 #​806 #​858
• Bump cross-spawn from 7.0.3 to 7.0.6 in #​814
• Bump https-proxy-agent from 7.0.5 to 7.0.6 in #​823
• Bump path-to-regexp from 6.2.2 to 6.3.0 in #​777

Full Changelog: docker/login-action@v3.3.0...v3.4.0

docker/metadata-action (docker/metadata-action)

v5.10.0

Compare Source

• Bump @​docker/actions-toolkit from 0.66.0 to 0.68.0 in #​559 #​569
• Bump js-yaml from 3.14.1 to 3.14.2 in #​564

Full Changelog: docker/metadata-action@v5.9.0...v5.10.0

v5.9.0

Compare Source

• Add tag-names output to return tag names without image base name by @​crazy-max in #​553
• Bump @​babel/runtime-corejs3 from 7.14.7 to 7.28.2 in #​539
• Bump @​docker/actions-toolkit from 0.62.1 to 0.66.0 in #​555
• Bump brace-expansion from 1.1.11 to 1.1.12 in #​540
• Bump csv-parse from 5.6.0 to 6.1.0 in #​532
• Bump semver from 7.7.2 to 7.7.3 in in #​554
• Bump tmp from 0.2.3 to 0.2.5 in #​541

Full Changelog: docker/metadata-action@v5.8.0...v5.9.0

v5.8.0

Compare Source

• New is_not_default_branch global expression by @​crazy-max in #​535
• Allow to match part of the git tag or value for semver/pep440 types by @​crazy-max in #​536 #​537
• Bump @​actions/github from 6.0.0 to 6.0.1 in #​523
• Bump @​docker/actions-toolkit from 0.56.0 to 0.62.1 in #​526
• Bump form-data from 2.5.1 to 2.5.5 in #​533
• Bump moment-timezone from 0.5.47 to 0.6.0 in #​525
• Bump semver from 7.7.1 to 7.7.2 in #​524

Full Changelog: docker/metadata-action@v5.7.0...v5.8.0

v5.7.0

Compare Source

• Global expressions support for labels and annotations by @​crazy-max in #​489
• Support disabling outputs as environment variables by @​omus in #​497
• Bump @​docker/actions-toolkit from 0.44.0 to 0.56.0 in #​507 #​509
• Bump csv-parse from 5.5.6 to 5.6.0 in #​482
• Bump moment-timezone from 0.5.46 to 0.5.47 in #​501
• Bump semver from 7.6.3 to 7.7.1 in #​504

Full Changelog: docker/metadata-action@v5.6.1...v5.7.0

v5.6.1

Compare Source

• Fix GitHub API request fallback for commit date by @​crazy-max in #​478
• Revert to default commit SHA length of 7 by @​crazy-max in #​480

Full Changelog: docker/metadata-action@v5.6.0...v5.6.1

v5.6.0

Compare Source

• Add commit_date global expression by @​trim21 in #​471 #​475
• Increase short commit sha length to 12 for uniqueness by @​crazy-max in #​467
• Bump @​actions/core from 1.10.1 to 1.11.1 #​460
• Bump @​docker/actions-toolkit from 0.16.1 to 0.44.0 #​391 #​399 #​413 #​441
• Bump braces from 3.0.2 to 3.0.3 #​424
• Bump cross-spawn from 7.0.3 to 7.0.5 #​474
• Bump csv-parse from 5.5.5 to 5.5.6 #​412
• Bump moment-timezone from 0.5.44 to 0.5.46 #​383 #​470 #​459
• Bump path-to-regexp from 6.2.2 to 6.3.0 #​454
• Bump semver from 7.6.0 to 7.6.3 #​400 #​411 #​440
• Bump undici from 5.26.3 to 5.28.4 #​386 #​402

Full Changelog: docker/metadata-action@v5.5.1...v5.6.0

coreos/go-oidc (github.com/coreos/go-oidc/v3)

v3.20.0

Compare Source

What's Changed

• oidc: modernize with new Go APIs by @​ericchiang in #​487
• oidc: improve documentation for APIs by @​ericchiang in #​488
• SECURITY.md: add a security policy and point to project-level reporting by @​ericchiang in #​489
• oidc: ignore JWKs with unknown signing algorithms rather than failing by @​ericchiang in #​491
• readme: update README and docs by @​ericchiang in #​492
• oidc: add API for determining when issuer URLs mismatch by @​ericchiang in #​493
• oidc: add constants for "email" and "profile" scopes by @​ericchiang in #​494

Full Changelog: coreos/go-oidc@v3.19.0...v3.20.0

v3.19.0

Compare Source

What's Changed

• fix: Key refresh should set no-cache to get most up to date keys by @​Yanni8 in #​485
• oidc: add support for validating back-channel logout tokens by @​ericchiang in #​486

New Contributors

• @​Yanni8 made their first contribution in #​485

Full Changelog: coreos/go-oidc@v3.18.0...v3.19.0

v3.18.0

Compare Source

What's Changed

• .github: configure dependabot by @​ericchiang in #​477
• .github: update go versions in CI by @​ericchiang in #​480
• build(deps): bump golang.org/x/oauth2 from 0.28.0 to 0.36.0 by @​dependabot[bot] in #​478
• build(deps): bump github.com/go-jose/go-jose/v4 from 4.1.3 to 4.1.4 by @​dependabot[bot] in #​479

Full Changelog: coreos/go-oidc@v3.17.0...v3.18.0

ergochat/irc-go (github.com/ergochat/irc-go)

v0.7.0

Compare Source

irc-go v0.7.0 is a new tagged release. It includes enhancements to ircevent, our IRC client library. There are no API breaks relative to previous tagged versions.

Added

• Added (*ircevent.Connection).MaxMessageLength() and FetchUserHost. MaxMessageLength can be used to compute the maximum length of a PRIVMSG or NOTICE message that can be sent to a target without truncation. By default, the initial invocation of MaxMessageLength returns a safe default value until a more accurate measurement can be obtained; FetchUserHost can be enabled to perform this measurement eagerly on each connection, at the cost of sending an additional command. (#​114, #​123, thanks @​lollipopman!)
• Added (*ircevent.Connection).SendBatch, SendBatchWithLabel, and GetLabeledResponseForBatch. These are APIs for sending a compliant IRCv3 client-initiated batch, for example with the multiline extension. (#​106, #​119)
• Added (*ircevent.Connection).AddRawCallback, an API for adding callbacks that take in the unparsed IRC line, without filtering on the command. This can be used to implement programmatic debug logs, or catch-all handling of otherwise unhandled commands. (#​76, #​116, thanks @​jcjordyn130!)

Security

• ircevent is now more resilient to malicious BATCH responses from servers, including excessively large or deep batches. (*ircevent.Connection).MaxTotalBatchSize was added to limit the total size of buffered batch data; it defaults to 8 MiB when unset. (#​118, #​122)

Changed

• Shortened the timeout for GetLabeledResponse (now approximately 1 minute by default) (#​124)

getkin/kin-openapi (github.com/getkin/kin-openapi)

v0.146.0

Compare Source

What's Changed

• openapi3: keep a document's origin tree only when it can be read by @​reuvenharrison in #​1234
• openapi3: store field locations in a slice, not a map by @​reuvenharrison in #​1235

Full Changelog: getkin/kin-openapi@v0.145.0...v0.146.0

v0.145.0

Compare Source

What's Changed

• openapi3: stop InternalizeRefs panicking on unresolved discriminator mappings by @​snowyukitty in #​1233

Full Changelog: getkin/kin-openapi@v0.144.0...v0.145.0

v0.144.0

Compare Source

What's Changed

• openapi3filter: prefer non-empty value for repeated scalar query params by @​sonnemusk in #​1231
• some fixes to please my moulinette by @​fenollp in #​1232

New Contributors

• @​sonnemusk made their first contribution in #​1231

Full Changelog: getkin/kin-openapi@v0.143.0...v0.144.0

v0.143.0

Compare Source

What's Changed

• openapi3: remove StringMap and its pre-OriginTree origin-stripping machinery by @​reuvenharrison in #​1219
• openapi3: huge test suite: make it more parallel by @​fenollp in #​1221
• openapi31: support 3.1+ reference metadata overrides by @​AlexanderWangY in #​1215
• docs: move the StringMap changelog entry to v0.143.0 by @​reuvenharrison in #​1222
• openapi3: add T.WalkParameters to visit every parameter in a document by @​reuvenharrison in #​1224
• openapi3filter: reuse deepObject bracket regex by @​matiasinsaurralde in #​1225
• openapi3filter: skip Split allocation for single-value array query params by @​matiasinsaurralde in #​1226
• openapi3: preserve origin for a $ref to a schema under an arbitrary top-level key by @​reuvenharrison in #​1227
• openapi3: stable codes for validation errors by @​reuvenharrison in #​1223
• openapi3filter: skip schema checks for empty allowEmptyValue strings by @​snowyukitty in #​1228
• openapi3gen: inline embedded struct with options-only JSON tag by @​mvanhorn in #​1229

New Contributors

• @​matiasinsaurralde made their first contribution in #​1225
• @​snowyukitty made their first contribution in #​1228
• @​mvanhorn made their first contribution in #​1229

Full Changelog: getkin/kin-openapi@v0.142.0...v0.143.0

v0.142.0

Compare Source

What's Changed

• openapi3: fix test that relied on now non-resolving domain by @​fenollp in #​1220

Full Changelog: getkin/kin-openapi@v0.141.0...v0.142.0

v0.141.0

Compare Source

What's Changed

• openapi3filter: honor comma-separated and wildcard encoding.contentType by @​utah-KT in #​1201
• openapi3: typed context wrappers for combinator and tag validation by @​reuvenharrison in #​1199
• openapi3: enforce unique required entries and unique tag names in Validate() by @​reuvenharrison in #​1203
• openapi3gen: Add an option to customize generated field names (properties) for structs by @​d1vbyz3r0 in #​1204
• openapi3: add T.WalkSchemas to visit every schema in a document by @​reuvenharrison in #​1206
• openapi3: record block end on Origin.Key (EndLine/EndColumn) by @​reuvenharrison in #​1207
• openapi3: record scalar-valued map keys for origin location lookup by @​reuvenharrison in #​1208
• docs: Go Report Card has been sunset by @​alexandear in #​1210
• openapi3: support OAS 3.2 itemSchema by @​fenollp in #​1213
• openapi3: make operation responses optional for 3.1+ by @​AlexanderWangY in #​1214
• qol: Makefile for shorthand commands + preflight scripts by @​AlexanderWangY in #​1217

New Contributors

• @​AlexanderWangY made their first contribution in #​1214

Full Changelog: getkin/kin-openapi@v0.140.0...v0.141.0

v0.140.0

Compare Source

What's Changed

• openapi3: document that a custom ReadFromURIFunc bypasses IsExternalRefsAllowed by @​reuvenharrison in #​1191
• openapi3: remove deepcopy dependency by @​alexandear in #​1193
• openapi3: remove decimal128 dependency by @​alexandear in #​1194
• refactor: apply modernize fixes by @​alexandear in #​1195
• openapi2,openapi3: replace marshmallow with encoding/json by @​alexandear in #​1196
• docs: update GoDoc links to Go Reference by @​alexandear in #​1197
• chore: bump jsonpointer to v0.22.5 by @​alexandear in #​1198

Full Changelog: getkin/kin-openapi@v0.139.0...v0.140.0

v0.139.0

Compare Source

What's Changed

• feat(openapi3): batch-convert long-tail RequiredFieldError sites by @​reuvenharrison in #​1170
• feat(openapi3): typed validation error clusters (combined: #​1171-#​1179) by @​reuvenharrison in #​1180
• openapi3gen: skip component export for anonymous types by @​0-don in #​1163
• feat: migrate to oasdiff/yaml v0.1.0 single Unmarshal API + enable DisableTimestamps by @​reuvenharrison in #​1181
• openapi3: typed context errors for Validate() wrapper chain by @​reuvenharrison in #​1183
• openapi3: track Origin on the document root (T) by @​reuvenharrison in #​1184
• openapi3: tests flakiness corrected by @​fenollp in #​1159
• openapi3: aggregate independent validation errors via EnableMultiError by @​reuvenharrison in #​1185
• openapi3: fix validation of duplicated path templates by @​reuvenharrison in #​1189
• openapi3: type the remaining bare-error validation sites by @​reuvenharrison in #​1187

Full Changelog: getkin/kin-openapi@v0.138.0...v0.139.0

v0.138.0

Compare Source

What's Changed

• openapi3gen: clear nullable on exported component bodies by @​0-don in #​1164
• openapi3: add test for issue #​927 (nullable not respected on $ref schemas) by @​fenollp in #​1165
• test: move public-API tests to external _test packages by @​fenollp in #​1168
• feat(openapi3): add per-type validation errors with cluster wrappers by @​reuvenharrison in #​1166
• feat(openapi3conv): canonicalization pass for 3.0 -> 3.x by @​reuvenharrison in #​1162
• openapi3conv: test Upgrade on many documents by @​fenollp in #​1169

Full Changelog: getkin/kin-openapi@v0.137.0...v0.138.0

v0.137.0

Compare Source

What's Changed

• revert to go 1.25 and revert cc4f8d9 by @​fenollp in #​1161

Full Changelog: getkin/kin-openapi@v0.136.0...v0.137.0

v0.136.0

Compare Source

What's Changed

• openapi3: stop injecting contentless default in NewResponses() by @​0-don in #​1148
• openapi3: standardize Origin json tag to "-" across all types by @​reuvenharrison in #​1149
• Update usage message in cmd/validate by @​fenollp in #​1150
• openapi3: fix determinism when handling discriminator mappings by @​fenollp in #​1151
• feat: bump Go to 1.26 by @​fenollp in #​1152
• openapi3: use componentNames for deterministic visitings by @​fenollp in #​1153
• feat: add OpenAPI 3.1 support by @​reuvenharrison in #​1125
• openapi3: add JoinFunc for custom $ref path resolution by @​reuvenharrison in #​1154
• Add many many tests from ApisGuruOpenapiDirectory by @​fenollp in #​1155
• openapi3: remove map-iteration order leaks causing flaky tests by @​cloudnativeninja in #​1158
• openapi2conv: nil-guard components lookup in FromV3SchemaRef by @​SAY-5 in #​1156
• Address various lint errors by @​fenollp in #​1157

New Contributors

• @​0-don made their first contribution in #​1148
• @​cloudnativeninja made their first contribution in #​1158
• @​SAY-5 made their first contribution in #​1156

Full Changelog: getkin/kin-openapi@v0.135.0...v0.136.0

v0.135.0

Compare Source

What's Changed

• openapi3: strip origin from Encodings and ServerVariables maps by @​reuvenharrison in #​1132
• fix: update yaml3 to prevent panic on empty mapping node in sequence by @​reuvenharrison in #​1133
• openapi3: strip origin from extension values to prevent spurious diffs by @​reuvenharrison in #​1137
• openapi3: strip origin from slices in example values by @​reuvenharrison in #​1138
• fix: bump yaml and yaml3 to v0.0.4 by @​reuvenharrison in #​1136
• openapi3: OriginTree approach for origin tracking — separate pass, no inline stripping by @​reuvenharrison in #​1142
• README: drop go-openapi/spec3 by @​zonescape in #​1143
• fix: bump yaml3+yaml to v0.0.9 to fix -root schema origin by @​reuvenharrison in #​1144
• openapi3: call ReadFromURIFunc before checking IsExternalRefsAllowed by @​reuvenharrison in #​1146
• fix: use location.String() instead of location.Path for origin file tracking by @​reuvenharrison in #​1145
• refactor: Replace sort usage with slices package by @​jedevc in #​1147

New Contributors

• @​zonescape made their first contribution in #​1143
• @​jedevc made their first contribution in #​1147

Full Changelog: getkin/kin-openapi@v0.134.0...v0.135.0

v0.134.0

Compare Source

What's Changed

• openapi3filter: feat(multipart-ct-decoder): default body decoder on binary schema by @​mieltn in #​1097
• openapi3: ensure SchemaErrors get the correct path for allOf schemas by @​jamesfcarter in #​1098
• openapi3filter: Fix empty string handling in parameter validation by @​utah-KT in #​1096
• tidy(docs): Update references to oapi-codegen project URL (issue #​1094) by @​frenchi in #​1095
• openapi2conv: fix allOf inside additionalProperties by @​dani-maarouf in #​1103
• openapi3filter: Reject requests with body when non expected (issue 1100) by @​CynanX in #​1101
• openapi3: fix for RFC3339 validation: time-offset is a required component by @​mpreu in #​1104
• openapi3: add file path to origin location tracking by @​reuvenharrison in #​1128
• openapi3filter: fix bug where absent optional properties fail validation in form-urlencoded requests by @​thierry-f-78 in #​1110
• feat: add document-scoped format validators to prevent global state pollution by @​the-corp-mark in #​1126
• openapi3: process discriminator mapping values as refs by @​RaduPetreTarean in #​1108
• openapi3: serialize Extensions when using $ref by @​irees in #​1131

New Contributors

• @​mieltn made their first contribution in #​1097
• @​jamesfcarter made their first contribution in #​1098
• @​utah-KT made their first contribution in #​1096
• @​frenchi made their first contribution in #​1095
• @​dani-maarouf made their first contribution in #​1103
• @​CynanX made their first contribution in #​1101
• @​mpreu made their first contribution in #​1104
• @​thierry-f-78 made their first contribution in #​1110
• @​the-corp-mark made their first contribution in #​1126
• @​RaduPetreTarean made their first contribution in #​1108

Full Changelog: getkin/kin-openapi@v0.133.0...v0.134.0

v0.133.0

Compare Source

What's Changed

• openapi3: resolve Snyk security warning with path traversal by @​seborama in #​1066
• openapi3: replace bigfloat with decimal128 to fix rounding errors during validation by @​Revolyssup in #​1068
• openapi2conv: Preserve externalDocs on operations during conversion by @​hwustrack in #​1070
• openapi3: fix ineffectual caching of compiled regexps by @​philpearl in #​1076
• openapi3: use Ptr instead of BoolPtr,Float64Ptr,Int64Ptr,Uint64Ptr by @​alexandear in #​1033
• openapi3: resolve refs in parameter examples by @​reuvenharrison in #​1086
• openapifilter: Add support for RFC 7396 application/merge-patch+json by @​byted in #​1084
• openapi3filter: use FileBodyDecoder if the format is specified as binary by @​dbarrosop in #​1088
• openapi3: preserve all validation errors for allOf by @​alexbakker in #​1087
• openapi3filter: support primitive parsing for individual text like parts in multipart/form-data by @​nmeheus in #​1090
• Some coding style fixes and cleaning up by @​fenollp in #​1093
• openapi2conv: preserve x-fields when converting from v2 to v3 by @​saltbo in #​1092

New Contributors

• @​seborama made their first contribution in #​1066
• @​Revolyssup made their first contribution in #​1068
• @​hwustrack made their first contribution in #​1070
• @​philpearl made their first contribution in #​1076
• @​byted made their first contribution in #​1084
• @​dbarrosop made their first contribution in #​1088
• @​nmeheus made their first contribution in #​1090
• @​saltbo made their first contribution in #​1092

Full Changelog: getkin/kin-openapi@v0.132.0...v0.133.0

v0.132.0

Compare Source

What's Changed

• style: Use fmt.Sprint without formating by @​gaiaz-iusipov in #​1061
• openapi3filter: don't consume request body in AuthenticatorFunc by @​jamietanna in #​1064
• openapi2conv: fix for refs on items within additional properties by @​roberth1988 in #​1067

New Contributors

• @​gaiaz-iusipov made their first contribution in #​1061
• @​roberth1988 made their first contribution in #​1067

Full Changelog: getkin/kin-openapi@v0.131.0...v0.132.0

go-ldap/ldap (github.com/go-ldap/ldap/v3)

v3.4.14

Compare Source

I want to thank everyone who contributed in the recents months. Compared to last year, the number of activities and PRs (including open ones) has increased dramatically. I would like to thank everyone who contributed to the project.

Personal note: Please keep in mind that this project is not funded or supported by a large company or similar organization. We work on the library in our free time after work. I appreciate your support, but please keep this in mind (including with other open-source projects).

What's Changed

• make stop-local-server fails with Docker due to unsupported -t option by @​t2y in #​584
• Fix panic on malformed LDAP responses by @​Bahtya in #​586
• chore(deps): bump github.com/Azure/go-ntlmssp from 0.1.0 to 0.1.1 in /v3 by @​dependabot[bot] in [#​587](https://redirect.github.co

✂ Note

PR body was truncated to here.

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

• any of the package files in this branch needs updating, or
• the branch becomes conflicted, or
• you click the rebase/retry checkbox if found above, or
• you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: package-lock.json

npm warn Unknown env config "store". This will stop working in the next major version of npm. See `npm help npmrc` for supported config options.
npm warn Unknown project config "shamefully-flatten". This will stop working in the next major version of npm. See `npm help npmrc` for supported config options.
npm error code ERESOLVE
npm error ERESOLVE could not resolve
npm error
npm error While resolving: convos@8.7.0
npm error Found: @sveltejs/vite-plugin-svelte@5.0.3
npm error node_modules/@sveltejs/vite-plugin-svelte
npm error   dev @sveltejs/vite-plugin-svelte@"^3.0.0" from the root project
npm error   peer @sveltejs/vite-plugin-svelte@"^5.0.0" from @sveltejs/vite-plugin-svelte-inspector@4.0.1
npm error   node_modules/@sveltejs/vite-plugin-svelte/node_modules/@sveltejs/vite-plugin-svelte-inspector
npm error     @sveltejs/vite-plugin-svelte-inspector@"^4.0.1" from @sveltejs/vite-plugin-svelte@5.0.3
npm error
npm error Could not resolve dependency:
npm error dev @sveltejs/vite-plugin-svelte@"^3.0.0" from the root project
npm error
npm error Conflicting peer dependency: vite@5.4.21
npm error node_modules/vite
npm error   peer vite@"^5.0.0" from @sveltejs/vite-plugin-svelte@3.1.2
npm error   node_modules/@sveltejs/vite-plugin-svelte
npm error     dev @sveltejs/vite-plugin-svelte@"^3.0.0" from the root project
npm error
npm error Fix the upstream dependency conflict, or retry this command with --force or --legacy-peer-deps to accept an incorrect (and potentially broken) dependency resolution.
npm error
npm error
npm error For a full report see:
npm error /runner/cache/others/npm/_logs/2026-08-10T00_45_59_097Z-eresolve-report.txt
npm error A complete log of this run can be found in: /runner/cache/others/npm/_logs/2026-08-10T00_45_59_097Z-debug-0.log