chore(deps): update patch/minor dependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
@apify/consts (source)	2.52.0 → 2.54.0
@apify/input_secrets (source)	1.2.27 → 1.2.48
@apify/log (source)	2.5.34 → 2.5.42
@crawlee/browser-pool	3.16.0 → 3.17.0
@crawlee/cheerio (source)	3.16.0 → 3.17.0
@crawlee/core (source)	3.16.0 → 3.17.0
@crawlee/jsdom (source)	3.16.0 → 3.17.0
@crawlee/playwright (source)	3.16.0 → 3.17.0
@crawlee/puppeteer (source)	3.16.0 → 3.17.0
@crawlee/types (source)	3.16.0 → 3.17.0
@crawlee/utils (source)	3.16.0 → 3.17.0
@types/node (source)	24.12.2 → 24.13.3
ajv (source)	8.18.0 → 8.20.0
apify-client (source)	2.22.3 → 2.23.4
crawlee (source)	3.16.0 → 3.17.0
fs-extra	11.3.4 → 11.3.6
oxlint (source)	1.73.0 → 1.74.0
tsx (source)	4.21.0 → 4.23.1
turbo (source)	2.10.4 → 2.10.5

---

Release Notes

apify/apify-shared-js (@​apify/consts)

v2.54.0

Compare Source

v2.53.3

Compare Source

Note: Version bump only for package @​apify/consts

v2.53.2

Compare Source

Bug Fixes

• enforce strict APIFY_ID_REGEX validation with anchors (#​640) (b46f967)

v2.53.1

Compare Source

Note: Version bump only for package @​apify/consts

v2.53.0

Compare Source

Features

• consts: add CI to META_ORIGINS (#​627) (2497c39)

v2.52.2

Compare Source

Note: Version bump only for package @​apify/consts

v2.52.1

Compare Source

Note: Version bump only for package @​apify/consts

apify/crawlee (@​crawlee/browser-pool)

v3.17.0

Compare Source

Bug Fixes

• add network timeouts to discoverValidSitemaps to prevent indefinite hangs (#​3429) (ee90835)
• bind Browser.pages() correctly in PuppeteerPlugin (#​3439) (c3a4b3b)
• browser-pool: allow unsetting launch context proxy URL (#​3621) (d5ab219)
• browser-pool: preserve caller's AbortContext across p-limit queue (#​3673) (c4d58d9), closes #​3670
• BrowserCrawler closes ctx.page before errorHandler runs on navig… (#​3655) (ab34886)
• change sequential approach to parallel for Iterator first page (#​3402) (adf3dae), closes #​3395
• core: apply object searchParams in HTTP request options (#​3622) (d32946e)
• core: release storage open queue slot on failure (#​3662) (18ebc61), closes #​3661
• correct failed requests delta count in periodic log message (#​3482) (a098f42)
• Correctly track the number of requests handled by a crawler (#​3410) (b2296ce), closes #​3083 #​3330
• e2e: resolve flaky Camoufox tests due to GitHub rate limits (#​3527) (08c98cf), closes #​3524
• honor custom respectRobotsTxtFile userAgent in enqueueLinks (#​3578) (1d2528b)
• log warning when Sitemap.load returns empty sitemap due to loading error (#​3462) (2cf9c1c)
• parse proxy URLs correctly when using useIncognitoPages (#​3433) (db2bb68)
• Prevent accidental request dropping with maxRequestsPerCrawl (#​3531) (b23319b)
• prevent iframe expansion failure on pages with Trusted Types CSP (#​3590) (c0b9b50), closes #​3588
• prevent v3 sitemap discovery init hangs in discoverValidSitemaps (#​3434) (6c04f92), closes #​3412
• unref BrowserController.close() fallback timer to avoid keeping Node alive longer than needed (#​3671) (eef94d4)
• using GET for candidate checks - sitemaps (#​3464) (f82eb04), closes #​3463

Features

• adaptive-crawler: add shouldPropagateError callback to prevent browser fallback (#​3635) (d3a29d9)
• add ignoreProxyCertificate option for the internal proxy-chain instance (#​3418) (02eec66), closes #​3369
• add abortDownload context helper to FileDownload (#​3528) (3b3d8f6)
• Dynamic memory snapshots (#​3471) (87c67dc), closes #​3408
• expose Download objects on PlaywrightCrawlingContext (#​3596) (5dc1627), closes #​3583
• Modularize SystemStatus to allow custom backpressure mechanisms (#​3529) (7159a13)
• templates: use ImpitHttpClient and install optional deps in Docker (#​3603) (113dca6), closes #​3601
• utils: add sitemapFilter option to parseSitemap (#​3557) (1d4f6b9)

Performance Improvements

• add lazyIterablePromise to kvs iterators (#​3413) (2658610)

ajv-validator/ajv (ajv)

v8.20.0

Compare Source

What's Changed

• fix: add support for node 22/24, drop node 16/21 by @​jasoniangreen in #​2580
• fix: add ES2022.RegExp for RegExpIndicesArray by @​SignpostMarv in #​2604

Full Changelog: ajv-validator/ajv@v8.19.0...v8.20.0

apify/apify-client-js (apify-client)

v2.23.4

Compare Source

🐛 Bug Fixes

• Use long commit SHA in release workflow [internal] (#​902) (a3ca5c7) by @​fnesveda
• Accept readonly arrays for webhook eventTypes input (#​931) (1737867) by @​B4nan

v2.23.3

Compare Source

🐛 Bug Fixes

• Drop only-allow preinstall, enforce pnpm via devEngines (#​895) (27f7b7b) by @​B4nan, closes #​893

v2.23.2

Compare Source

🐛 Bug Fixes

• Add support for new list request-queue requests parameters (#​880) (c5f441b) by @​mvolfik

v2.23.1

Compare Source

🐛 Bug Fixes

• Make Node-only imports bundler-discoverable (#​885) (d57c048) by @​barjin, closes #​852, #​861

v2.23.0

Compare Source

🚀 Features

• Add output schema to ActorDefinition and includeUnrunnableActors to store API (#​881) (c965d15) by @​jancurn

🐛 Bug Fixes

• Turn any log streaming related errors to warnings (#​876) (a3268ee) by @​Pijukatel, closes #​873

jprichardson/node-fs-extra (fs-extra)

v11.3.6

Compare Source

• Fix handling of symlinked destination ancestors in copy/move methods (#​1071, #​1073)
• Docs typo fixed (#​1074)

v11.3.5

Compare Source

• Fix ensureLink*/ensureSymlink* identical file detection on Windows (#​1068)
• Fix error handling in timestamp preservation code (#​1065, #​1069)
• Fix potential file descriptor leak on error in synchronous timestamp preservation code (#​1066)

oxc-project/oxc (oxlint)

v1.74.0

Compare Source

🚀 Features

• 0433a83 linter/eslint/no-inner-declarations: Add namespaces option (#​24044) (Boshen)

🐛 Bug Fixes

• 8337835 linter: Error on ignorePatterns that cannot match files aoutside the config directory (#​24341) (leaysgur)
• 2ce5a33 linter: Resolve ignorePatterns relative to the config dir (#​24339) (leaysgur)

⚡ Performance

• 7f80cac linter/vue/prop-name-casing: Precompile ignoreProps regex pattern (#​24413) (connorshea)
• 6272051 linter/typescript/no-require-imports: Compile allow patterns once (#​24417) (connorshea)
• 33805b9 linter/jsdoc/require-param: Compile checkTypesPattern regex once (#​24420) (connorshea)

privatenumber/tsx (tsx)

v4.23.1

Compare Source

Bug Fixes

• support tsImport after global preload (8d4ffc2)
• watch: avoid clearing piped output (95d0672)
• watch: treat script and dependency paths literally (79fddde)

Performance Improvements

• index transform cache lazily (e818ad6)
• load esbuild lazily in CLI (d067938)
• map Node TypeScript formats directly (cdcc623)
• use sync module hooks on Node v22.22.3+ (f8992f1)

---

This release is also available on:

• npm package (@​latest dist-tag)

v4.23.0

Compare Source

Bug Fixes

• avoid redundant filesystem probes during module resolution (257bbbb), closes privatenumber/tsx#809

Features

• add multi-scenario startup benchmark suite (c178197), closes privatenumber/tsx#809 #​809 hi#signal privatenumber/tsx#145 #​809

---

This release is also available on:

• npm package (@​latest dist-tag)

v4.22.5

Compare Source

Bug Fixes

• isolate hook state per async module.register() registration (a305f36)

---

This release is also available on:

• npm package (@​latest dist-tag)

v4.22.4

Compare Source

Bug Fixes

• resolve CommonJS directory requires inside dependencies (#​803) (1ce8463)

---

This release is also available on:

• npm package (@​latest dist-tag)

v4.22.3

Compare Source

Bug Fixes

• decode typed loader source (dce02fc)
• preserve entrypoint with TypeScript preload hooks (68f72f3)

---

This release is also available on:

• npm package (@​latest dist-tag)

v4.22.2

Compare Source

Bug Fixes

• preserve CJS JSON require in ESM hooks (35b700b)
• preserve named exports from CommonJS TypeScript (11de737)
• support module.exports require(esm) interop (cf8f199)

---

This release is also available on:

• npm package (@​latest dist-tag)

v4.22.1

Compare Source

Bug Fixes

• resolve tsconfig path aliases containing a colon (#​780) (6979f28)

---

This release is also available on:

• npm package (@​latest dist-tag)

v4.22.0

Compare Source

Features

• upgrade esbuild to 0.28 (#​789) (b29f6ee)

---

This release is also available on:

• npm package (@​latest dist-tag)

v4.21.1

Compare Source

Bug Fixes

• support Node 20.11/21.2 import.meta paths (acf3d8f)
• support Node.js 24.15.0 (c1d2d45)
• support Node.js 26.1.0 and 25.9.0 (1d7e528)

---

This release is also available on:

• npm package (@​latest dist-tag)

vercel/turborepo (turbo)

v2.10.5: Turborepo v2.10.5

Compare Source

What's Changed

Changelog

• perf: Evaluate simple include globs without wax compilation by @​anthonyshew in #​13285
• chore: Dogfood native Cargo support in this repository by @​anthonyshew in #​13283
• release(turborepo): 2.10.4 by @​github-actions[bot] in #​13286
• ci: Remove dead sccache configuration by @​anthonyshew in #​13289
• feat: Serve the Remote Cache as an sccache backend for Cargo tasks by @​anthonyshew in #​13288
• fix: Reject output path traversal by @​anthonyshew in #​13290
• fix: Disable the sccache proxy when remote cache use is off by @​anthonyshew in #​13291
• feat: Embed sccache so the Cargo compile cache needs no installation by @​anthonyshew in #​13293
• release(turborepo): 2.10.5-canary.1 by @​github-actions[bot] in #​13294
• fix: Pin a flag-aware turbo canary for the eve-agent deployment by @​anthonyshew in #​13295
• fix: Make the sccache compile cache actually cache by @​anthonyshew in #​13296
• release(turborepo): 2.10.5-canary.2 by @​github-actions[bot] in #​13297
• fix: Stop ambient CARGO_INCREMENTAL from suppressing compile cache injection by @​anthonyshew in #​13298
• fix: Never let compile cache storage failures fail the build by @​anthonyshew in #​13299
• test: Add outputs path-traversal negative-case regression tests by @​dnukumamras in #​13300
• release(turborepo): 2.10.5-canary.3 by @​github-actions[bot] in #​13302
• ci: Authenticate to Remote Cache via OIDC token exchange by @​anthonyshew in #​13303
• fix: Keep pnpm patches with version range keys during prune by @​anthonyshew in #​13307
• test: Scrub ambient turbo configuration from integration test children by @​anthonyshew in #​13306
• fix: Show toolchain tasks in the TUI and never run in silence by @​anthonyshew in #​13308
• ci: Fix change detection on push events by @​anthonyshew in #​13304
• refactor: Rename the Cargo toolchain id to rust by @​anthonyshew in #​13311
• fix: Remove extraneous bun.lock entries during prune by @​anthonyshew in #​13317
• feat: Require a user-declared name for the Cargo workspace package by @​anthonyshew in #​13312
• feat: Parse and validate the task command field by @​anthonyshew in #​13313
• chore: Harden turbo-vsc to invoke turbo without a shell by @​dnukumamras in #​13319
• feat: Resolve and execute task command overrides by @​anthonyshew in #​13315
• release(turborepo): 2.10.5-canary.4 by @​github-actions[bot] in #​13325
• feat: Run the Rust workspace tests through nextest via command override by @​anthonyshew in #​13316
• feat: Engage the Remote Cache and sccache compile cache for Rust CI by @​anthonyshew in #​13292
• ci: Pin GitHub Actions to full commit SHAs by @​XananasX7 in #​13143
• fix: Make npm prune rehoisting deterministic and complete by @​anthonyshew in #​13323
• feat: Report incremental cache reuse in the run summary by @​anthonyshew in #​13327
• chore: Remove planning docs by @​anthonyshew in #​13329
• docs: Migrate docs site to @​vercel/geistdocs package by @​molebox in #​13320
• ci: Update Remote Cache action by @​anthonyshew in #​13330
• release(turborepo): 2.10.5-canary.5 by @​github-actions[bot] in #​13331
• ci: Remove path-based workflow scheduling by @​anthonyshew in #​13332
• fix: Resolve EADDRINUSE in kitchen-sink api dev script by @​ashusnapx in #​13328
• ci: Disable telemetry messages in workflows by @​anthonyshew in #​13334
• fix: Prevent Cargo run tasks from being cached by @​anthonyshew in #​13335
• fix: Isolate Cargo cache by host platform by @​anthonyshew in #​13337
• fix: Continue TUI text selection beyond viewport by @​anthonyshew in #​13338
• ci: Dogfood Cargo target restoration by @​anthonyshew in #​13336
• fix: Require current Cargo lockfiles for caching by @​anthonyshew in #​13339
• fix: Reject unsupported Cargo local packages by @​anthonyshew in #​13340
• fix: Allow outputs outside package roots by @​anthonyshew in #​13342
• fix: Resolve Cargo lock dependencies by source by @​anthonyshew in #​13343
• docs: Update Cargo workspace support by @​anthonyshew in #​13349
• fix: Build Ghostty for baseline CPUs by @​anthonyshew in #​13352
• fix: Preserve watch rerun semantics for task inputs by @​anthonyshew in #​13351
• fix: Isolate Command Overrides From Toolchain Cache I/O by @​anthonyshew in #​13354
• release(turborepo): 2.10.5-canary.6 by @​github-actions[bot] in #​13355
• fix: Include patched Ghostty crate in Cargo workspace by @​anthonyshew in #​13357
• ci: Shard Rust tests across runners by @​anthonyshew in #​13356
• fix: Hash Cargo build environment inputs by @​anthonyshew in #​13348
• fix: Synchronize Cargo prune Docker lockfile by @​anthonyshew in #​13350
• chore: Update agents app Eve dependency by @​anthonyshew in #​13364
• fix: Preserve Yarn package extension ranges when pruning by @​anthonyshew in #​13363
• refactor: Add Toolchain output availability by @​anthonyshew in #​13360

New Contributors

• @​dnukumamras made their first contribution in #​13300
• @​XananasX7 made their first contribution in #​13143
• @​ashusnapx made their first contribution in #​13328

Full Changelog: vercel/turborepo@v2.10.4...v2.10.5

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • "every weekday"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.