deps: bump confetti from 4.1.5 to 4.2.1

[dependabot]

Bumps confetti from 4.1.5 to 4.2.1.

Changelog

Sourced from confetti's changelog.

4.2.1

• Fix: ticket fields that the API returns as null are now accepted as null on write. tickets.update previously rejected company, comment, ticketBatchId, firstName, lastName, email, phone, guests and values with Invalid input: expected string, received null, so a ticket read from the API could not be written back unchanged. The same fields are now nullable on tickets.create and on inline guestTickets. Passing null clears the field, except for ticketBatchId, where it leaves the current batch unchanged.
• Fix: schemaToAttributes() (and therefore model.operations.*.attributes) reported type: 'string' for any nullable field. Optional and nullable wrappers are now unwrapped in any order, so ticketBatchId is number, form field sectionId is number, and webhook eventId is number. Only .optional() marks an attribute as not required — .nullable() on its own still requires the key.

4.2.0

• Feature: ticket status can now be set to declined on tickets.update, in addition to attending and invited. Only free tickets can be declined — the API rejects declining a paid ticket.

4.1.0

• Feature: tickets.update(id, data, options) for editing tickets after create.
• Feature: tickets can now be created with inline guestTickets — an array of guest people that become child tickets attached to the parent. Each guest accepts firstName, lastName, email, phone, company, and values. Requires the event to have guest info enabled. Guests can only be set at create time; editing or removing guests on an existing ticket is not yet supported by the API.
• Feature: tickets now expose parentTicket (the parent of a guest ticket) and guestTickets (the guests of a parent ticket) as includable relations.
• Feature: ticket values (raw form field answers keyed by field name) can now be set on both create and update.
• Change: form field name is auto-generated from title when omitted on create, and is now treated as immutable — it is no longer accepted by formFields.update.

4.0.0 - 2026-06-01

• Feature: write-side CRUD added across the SDK — events.update, full CRUD for pages, blocks, images, formFields, speakers, organisers, scheduleItems, sponsors, sponsorLevels, plus read-only forms and formFields.
• Feature: image uploads supported via images.create.
• Feature: every model now exposes Zod schemas at model.operations.{read,create,update}.schema, and a schemaToJsonSchema() utility converts them to JSON Schema for tools like MCP.
• Feature: events expose customCss, a workspace relationship, and a tightened location schema.
• Feature: new previewToken model.
• Change: model attribute metadata moved from model.attributes to model.operations.read.attributes.
• Change: model field descriptions migrated from .describe(JSON.stringify(...)) to native Zod .meta(), including label, description, helpText, and enum values for tooling.
• Change: blocks and images use type instead of blockType / imageType.
• Change: yayson upgraded to v4; the SDK uses typed presenters and store symbols internally.
• Change: dependency versions pinned (caret ranges dropped) for reproducible installs.

3.0.5 - 2026-05-20

• Fix: accept both string and number ids on write-side *Id fields (create, update, filter). JSON:API returns ids as strings, so values from findAll can now be passed straight into create without a ZodError. Uses z.coerce.number() — numeric callers keep working.

3.0.0 - 2025-09-15

• model.attributes are now found in model.operations.read.attributes
• Zod schemas are now included in all models
• Data and options is validated with Zod before being sent to the server
• Entire library rewritten to TypeScript and now provides types
• Drop support for Node 14, 16 & 18.
• ESM only

2.0.6 - 2025-01-27

• Fix: removes company field from create attributes in ticket model

2.0.5 - 2025-01-24

• Add company field to ticket model

... (truncated)

Commits

• b8ab638 4.2.1
• 3b60809 Changelog for 4.2.1
• 737daa9 Merge pull request #40 from confetti/story/nullable-ticket-fields
• b54470f Accept null on nullable ticket fields
• 1c1733d 4.2.0
• 368c464 Merge pull request #39 from confetti/story/ticket-decline
• 11790bb Allow declining a ticket via tickets.update
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)