chore(deps): pin dependencies

[red-hat-konflux-kflux-prd-rh02]

This PR contains the following updates:

Package	Type	Update	Change	Age	Confidence
@types/node (source)	devDependencies	pin	^22.0.0 → 22.20.1
@types/react (source)	devDependencies	pin	^18.3.23 → 18.3.31
globals	devDependencies	pin	^17.7.0 → 17.9.0
husky	devDependencies	pin	^9.1.7 → 9.1.7
i18next (source)	devDependencies	pin	^25.10.10 → 25.10.10
i18next-cli	devDependencies	pin	^1.66.2 → 1.67.4
postcss (source)	resolutions	patch	8.5.25 → 8.5.26
redux (source)	devDependencies	pin	~5.0.1 → 5.0.1
serialize-javascript	resolutions	minor	7.0.7 → 7.1.0
ts-node (source)	devDependencies	pin	^10.9.2 → 10.9.2
typescript (source)	devDependencies	pin	^5.9.3 → 5.9.3
vite (source)	resolutions	patch	8.2.0 → 8.2.1
ws	resolutions	patch	8.21.1 → 8.21.3
yarn (source)	packageManager	minor	4.17.1 → 4.18.0

---

Warning

Some dependencies could not be looked up. Check the warning logs for more information.

⚠️ Renovate's pin functionality does not currently wire in the release age for a package, so the Minimum Release Age checks can apply. You will need to manually validate the Minimum Release Age for these package(s).

Add the preset :preserveSemverRanges to your config if you don't want to pin your dependencies.

---

Release Notes

postcss/postcss (postcss)

v8.5.26

Compare Source

• Fixed list.split() regression (by @​lazerg).
• Track symlinks in path protection in source map loading (by @​drengir1).

yahoo/serialize-javascript (serialize-javascript)

v7.1.0

Compare Source

What's Changed

• feat: add Node.js 26 to test matrix by @​okuryu in #​224
• release: v7.1.0 by @​okuryu in #​225

Full Changelog: yahoo/serialize-javascript@v7.0.7...v7.1.0

vitejs/vite (vite)

v8.2.1

Compare Source

Bug Fixes

• build: make client chunkImportMap work with sharedPlugins: true (#​23184) (15f0307)
• bundled-dev: inject client script tag before chunk scripts (#​23161) (eac0cc8)
• css: don't re-run lightningcss visitor during minify (fix #​23146) (#​23147) (de041a7)
• deps: update all non-major dependencies (#​23136) (14454fd)
• deps: update rolldown-related dependencies (#​23070) (7ac6f7f)
• don't mutate the user config when resolving the lib entry from the top-level input (#​23135) (b4bf596)
• handle shebang ending with uncommon line terminators (#​23038) (17f7b2f)
• server: use a random port when port is 0 (#​23158) (fddf4ea)

Performance Improvements

• css: look up pure CSS chunks through a Set (#​23114) (1331b0b)

Documentation

• build: fix incomplete @default for build.minify (#​23177) (ef02435)

Miscellaneous Chores

• deps: update dependency rolldown-plugin-dts to ^0.28.0 (#​23137) (4adc1e7)
• deps: update dependency strip-literal to v4 (#​23140) (9db65ce)

Code Refactoring

• bundled-dev: avoid injecting server values in the bundle (#​22967) (23b8a08)
• bundled-dev: remove rolldown lazy stub module workaround (#​23129) (e72036e)

Tests

• bundled-dev: enable sourcemap playgrounds (#​23080) (c2155fe)
• reduce logs (#​23138) (7673c02)

websockets/ws (ws)

v8.21.3

Compare Source

Bug fixes

• The server now correctly rejects permessage-deflate offers if the incoming
  client_max_window_bits parameter value is smaller than its configured
  clientMaxWindowBits (e97a20e).

v8.21.2

Compare Source

Bug fixes

• Fixed a test for CITGM (2eb3be0).

yarnpkg/berry (yarn)

v4.18.0: v4.18.0

Compare Source

What's Changed

• fix(nm): prefer direct dependency binaries by @​ychampion in #​7216
• fix: make sure hoistingLimits are not bypassed by @​Knagis in #​7189
• fix: preserve root path in tryWorkspaceByCwd when cwd is / by @​quinise in #​7203
• perf(nm): avoid redundant package map sorting by @​theKashey in #​7223
• fix(extensions): declare the typescript peer for the Volar packages by @​zkochan in #​7232
• CI: Aggregate acceptance test matrix result by @​clemyan in #​7224
• Docs: fix catalog schema by @​clemyan in #​7220
• E2E: Fix most E2E tests by @​clemyan in #​7228
• docs: remove peerDependencies from catalog supported fields by @​nomaanifesto in #​7230
• fix(plugin-npm): resolve "*" to prereleases when no stable version exists by @​arpitjain099 in #​7205
• Skip OTP prompts in non-TTY mode by @​Andarist in #​7209
• Version: Reimplement yarn version and yarn version apply by @​clemyan in #​7218
• feat: bump js-yaml to v4 by @​JounQin in #​6768
• chore(deps): upgrade sigstore to v4 by @​mhassan1 in #​7208

New Contributors

• @​ychampion made their first contribution in #​7216
• @​Knagis made their first contribution in #​7189
• @​quinise made their first contribution in #​7203
• @​theKashey made their first contribution in #​7223
• @​nomaanifesto made their first contribution in #​7230
• @​arpitjain099 made their first contribution in #​7205
• @​JounQin made their first contribution in #​6768

Full Changelog: https://github.com/yarnpkg/berry/compare/@yarnpkg/cli/4.17.1...@​yarnpkg/cli/4.18.0

---

Configuration

📅 Schedule: (in timezone UTC)

• Branch creation
  • "before 7am"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

To execute skipped test pipelines write comment /ok-to-test.

---

Documentation

Find out how to configure dependency updates in MintMaker documentation or see all available configuration options in Renovate documentation.

[openshift-ci]

Hi @red-hat-konflux-kflux-prd-rh02[bot]. Thanks for your PR.

I'm waiting for a openshift member to verify that this patch is reasonable to test. If it is, they should reply with /ok-to-test on its own line. Until that is done, I will not automatically test new commits in this PR, but the usual testing commands by org members will still work.

Regular contributors should join the org to skip this step.

Once the patch is verified, the new status will be reflected by the ok-to-test label.

I understand the commands that are listed here.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

[dsimansk]

/ok-to-test

[dsimansk]

/approve
/lgtm

[openshift-ci]

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: dsimansk, red-hat-konflux-kflux-prd-rh02[bot]

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details

Needs approval from an approver in each of these files:

• OWNERS [dsimansk]

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment