chore(deps): bump the npm-dependencies group across 1 directory with 53 updates

[dependabot]

Bumps the npm-dependencies group with 50 updates in the / directory:

Package	From	To
@agentclientprotocol/sdk	0.16.1	0.25.0
@octokit/rest	22.0.0	22.0.1
@vitest/eslint-plugin	1.4.3	1.6.19
esbuild	0.25.6	0.28.0
eslint-config-prettier	10.1.5	10.1.8
eslint-plugin-headers	1.3.3	1.3.4
google-artifactregistry-auth	3.4.0	3.5.0
memfs	4.42.0	4.57.6
mnemonist	0.40.3	0.40.4
msw	2.10.4	2.14.6
prettier	3.6.1	3.8.3
react-dom	19.2.4	19.2.7
@types/react-dom	19.2.2	19.2.3
semver	7.7.4	7.8.2
@types/semver	7.7.0	7.7.1
strip-ansi	7.1.2	7.2.0
tsx	4.20.3	4.22.4
typescript-eslint	8.35.0	8.60.1
node-pty	1.0.0	1.1.0
@a2a-js/sdk	0.3.11	0.3.13
fs-extra	11.3.1	11.3.5
tar	7.5.11	7.5.16
@types/tar	6.1.13	7.0.87
winston	3.17.0	3.19.0
@types/express	5.0.3	5.0.6
supertest	7.1.4	7.2.2
@types/supertest	6.0.3	7.2.0
@modelcontextprotocol/sdk	1.26.0	1.29.0
clipboardy	5.2.1	5.3.1
shell-quote	1.8.3	1.8.4
string-width	8.1.0	8.2.1
ws	8.18.3	8.21.0
@bufbuild/protobuf	2.11.0	2.12.0
@google-cloud/logging	11.2.1	11.2.2
@grpc/grpc-js	1.14.3	1.14.4
@opentelemetry/api	1.9.0	1.9.1
@opentelemetry/semantic-conventions	1.39.0	1.41.1
ajv	8.18.0	8.20.0
fdir	6.4.6	6.5.0
js-yaml	4.1.1	4.2.0
mime	4.0.7	4.1.0
systeminformation	5.31.6	5.31.7
tree-sitter-bash	0.25.0	0.25.1
web-tree-sitter	0.25.10	0.26.9
zod-to-json-schema	3.25.1	3.25.2
@types/json-stable-stringify	1.1.0	1.2.0
@types/picomatch	4.0.1	4.0.3
cors	2.8.5	2.8.6
@types/vscode	1.99.0	1.120.0
@vscode/vsce	3.6.0	3.9.2

Updates @agentclientprotocol/sdk from 0.16.1 to 0.25.0

Release notes

Sourced from @​agentclientprotocol/sdk's releases.

v0.25.0

0.25.0 (2026-06-05)

Features

• schema: stabilize deleteSession (#168) (2cc77af)

v0.24.0

0.24.0 (2026-06-02)

Features

• Add resilient schema deserialization (#167) (5864e73)
• schema: Stabilize addl dirs and remove unstable model selectors (#165) (fa6e302)

v0.23.0

0.23.0 (2026-06-01)

Features

• schema: Stabilize logout and update schema to v0.13.4 (#163) (cfd900a)

v0.22.1

0.22.1 (2026-05-18)

Bug Fixes

• Event ordering (#153) (7b63226)

v0.22.0

0.22.0 (2026-05-18)

Features

• unstable: Add session delete handling (#152) (f9384f5)
• Update schema to v0.13.2 (#150) (b15960b)

v0.21.1

0.21.1 (2026-05-14)

Bug Fixes

• emit .js extensions in generated schema barrel for nodenext consumers (#146) (63b96db)

... (truncated)

Changelog

Sourced from @​agentclientprotocol/sdk's changelog.

0.25.0 (2026-06-05)

Features

• schema: stabilize deleteSession (#168) (2cc77af)

0.24.0 (2026-06-02)

Features

• Add resilient schema deserialization (#167) (5864e73)
• schema: Stabilize addl dirs and remove unstable model selectors (#165) (fa6e302)

0.23.0 (2026-06-01)

Features

• schema: Stabilize logout and update schema to v0.13.4 (#163) (cfd900a)

0.22.1 (2026-05-18)

Bug Fixes

• Event ordering (#153) (7b63226)

0.22.0 (2026-05-18)

Features

• unstable: Add session delete handling (#152) (f9384f5)
• Update schema to v0.13.2 (#150) (b15960b)

0.21.1 (2026-05-14)

Bug Fixes

• emit .js extensions in generated schema barrel for nodenext consumers (#146) (63b96db)

0.21.0 (2026-04-28)

Features

• unstable: Add providers/* support (#138) (e234c21)

... (truncated)

Commits

• c55af88 chore(main): release 0.25.0 (#169)
• 2cc77af feat(schema): stabilize deleteSession (#168)
• 8966c11 chore(main): release 0.24.0 (#166)
• 5864e73 feat: Add resilient schema deserialization (#167)
• fa6e302 feat(schema): Stabilize addl dirs and remove unstable model selectors (#165)
• 0c2e622 chore(main): release 0.23.0 (#164)
• cfd900a feat(schema): Stabilize logout and update schema to v0.13.4 (#163)
• 171a253 chore(deps-dev): bump concurrently from 9.2.1 to 10.0.0 (#162)
• 0ecf001 chore(deps): bump the minor group with 19 updates (#161)
• ca74103 chore(deps): bump crate-ci/typos from 1.46.2 to 1.47.0 (#160)
• Additional commits viewable in compare view

Updates @octokit/rest from 22.0.0 to 22.0.1

Release notes

Sourced from @​octokit/rest's releases.

v22.0.1

22.0.1 (2025-10-31)

Bug Fixes

• deps: update octokit monorepo (major) (#538) (ded2f17)

Commits

• daa3ec9 ci(action): update actions/setup-node action to v6 (#534)
• 1dec0c7 ci(action): update peter-evans/create-or-update-comment action to v5 (#531)
• ded2f17 fix(deps): update octokit monorepo (major) (#538)
• 0e0eaea chore(deps): update dependency @​types/node to v24 (#537)
• c04acc8 chore(deps): update vitest monorepo to v4 (major) (#536)
• e6dd306 chore(deps): update dependency undici to v7 (#474)
• 5f380d0 build(deps-dev): Bump form-data from 4.0.2 to 4.0.4 in /docs (#520)
• dc6827d build(deps-dev): Bump tar-fs from 2.1.2 to 2.1.3 in /docs (#516)
• See full diff in compare view

Updates @vitest/eslint-plugin from 1.4.3 to 1.6.19

Release notes

Sourced from @​vitest/eslint-plugin's releases.

v1.6.19

No significant changes

    View changes on GitHub

v1.6.18

   🐞 Bug Fixes

• Correct requiresTypeChecking metadata for four rules  -  by @​inglec-arista in vitest-dev/eslint-plugin-vitest#905 (e06a3)

    View changes on GitHub

v1.6.17

   🐞 Bug Fixes

• Recommend toBeTypeOf instead of expectTypeOf in prefer-expect-type-of  -  by @​sheremet-va in vitest-dev/eslint-plugin-vitest#896 (a4bcd)
• no-standalone-expect: Allow expect inside vi.defineHelper callbacks  -  by @​nami8824 in vitest-dev/eslint-plugin-vitest#894 (fd8eb)

    View changes on GitHub

v1.6.16

   🚀 Features

• require-test-timeout: Support ancestor traversal  -  by @​hamirmahal in vitest-dev/eslint-plugin-vitest#890 (8110b)

    View changes on GitHub

v1.6.15

What's Changed

• feat: allow same-file const variable timeouts by @​hamirmahal in vitest-dev/eslint-plugin-vitest#888

Full Changelog: vitest-dev/eslint-plugin-vitest@v1.6.14...v1.6.15

v1.6.14

What's Changed

• chore: bump @​typescript-eslint packages to ^8.58.0 by @​null0rUndefined in vitest-dev/eslint-plugin-vitest#886

New Contributors

• @​null0rUndefined made their first contribution in vitest-dev/eslint-plugin-vitest#886

Full Changelog: vitest-dev/eslint-plugin-vitest@v1.6.13...v1.6.14

v1.6.13

   🚀 Features

• unbound-method: Re-enable rule  -  by @​FloEdelmann in vitest-dev/eslint-plugin-vitest#883 (944f2)

    View changes on GitHub

... (truncated)

Commits

• 28bc45f chore: release v1.6.19
• 8566d7f chore: prefer-called-with should report toHaveBeenCalledOnce() (#911)
• 3b428d6 chore: release v1.6.18
• e06a3dc fix: correct requiresTypeChecking metadata for four rules (#905)
• 789966e chore: release v1.6.17
• a4bcdf5 fix: recommend toBeTypeOf instead of expectTypeOf in `prefer-expect-type-...
• fd8eb3c fix(no-standalone-expect): allow expect inside vi.defineHelper callbacks (#894)
• dbf423c refactor: simplify ParsedGeneralVitestFnCall type exclusion (#895)
• 3dfdf72 chore: release v1.6.16
• 8110bfa feat(require-test-timeout): support ancestor traversal (#890)
• Additional commits viewable in compare view

Updates esbuild from 0.25.6 to 0.28.0

Release notes

Sourced from esbuild's releases.

v0.28.0

• Add support for with { type: 'text' } imports (#4435)

  The import text proposal has reached stage 3 in the TC39 process, which means that it's recommended for implementation. It has also already been implemented by Deno and Bun. So with this release, esbuild also adds support for it. This behaves exactly the same as esbuild's existing text loader. Here's an example:

  import string from './example.txt' with { type: 'text' }
  console.log(string)

• Add integrity checks to fallback download path (#4343)

  Installing esbuild via npm is somewhat complicated with several different edge cases (see esbuild's documentation for details). If the regular installation of esbuild's platform-specific package fails, esbuild's install script attempts to download the platform-specific package itself (first with the npm command, and then with a HTTP request to registry.npmjs.org as a last resort).

  This last resort path previously didn't have any integrity checks. With this release, esbuild will now verify that the hash of the downloaded binary matches the expected hash for the current release. This means the hashes for all of esbuild's platform-specific binary packages will now be embedded in the top-level esbuild package. Hopefully this should work without any problems. But just in case, this change is being done as a breaking change release.

• Update the Go compiler from 1.25.7 to 1.26.1

  This upgrade should not affect anything. However, there have been some significant internal changes to the Go compiler, so esbuild could potentially behave differently in certain edge cases:

  • It now uses the new garbage collector that comes with Go 1.26.
  • The Go compiler is now more aggressive with allocating memory on the stack.
  • The executable format that the Go linker uses has undergone several changes.
  • The WebAssembly build now unconditionally makes use of the sign extension and non-trapping floating-point to integer conversion instructions.

  You can read the Go 1.26 release notes for more information.

v0.27.7

• Fix lowering of define semantics for TypeScript parameter properties (#4421)

  The previous release incorrectly generated class fields for TypeScript parameter properties even when the configured target environment does not support class fields. With this release, the generated class fields will now be correctly lowered in this case:

  // Original code
  class Foo {
    constructor(public x = 1) {}
    y = 2
  }
  // Old output (with --loader=ts --target=es2021)
  class Foo {
  constructor(x = 1) {
  this.x = x;
  __publicField(this, "y", 2);
  }
  x;
  }
  // New output (with --loader=ts --target=es2021)
  class Foo {

... (truncated)

Changelog

Sourced from esbuild's changelog.

Changelog: 2025

This changelog documents all esbuild versions published in the year 2025 (versions 0.25.0 through 0.27.2).

0.27.2

• Allow import path specifiers starting with #/ (#4361)

  Previously the specification for package.json disallowed import path specifiers starting with #/, but this restriction has recently been relaxed and support for it is being added across the JavaScript ecosystem. One use case is using it for a wildcard pattern such as mapping #/* to ./src/* (previously you had to use another character such as #_* instead, which was more confusing). There is some more context in nodejs/node#49182.

  This change was contributed by @​hybrist.

• Automatically add the -webkit-mask prefix (#4357, #4358)

  This release automatically adds the -webkit- vendor prefix for the mask CSS shorthand property:

  /* Original code */
  main {
    mask: url(x.png) center/5rem no-repeat
  }
  /* Old output (with --target=chrome110) */
  main {
  mask: url(x.png) center/5rem no-repeat;
  }
  /* New output (with --target=chrome110) */
  main {
  -webkit-mask: url(x.png) center/5rem no-repeat;
  mask: url(x.png) center/5rem no-repeat;
  }

  This change was contributed by @​BPJEnnova.

• Additional minification of switch statements (#4176, #4359)

  This release contains additional minification patterns for reducing switch statements. Here is an example:

  // Original code
  switch (x) {
    case 0:
      foo()
      break
    case 1:
    default:
      bar()
  }

... (truncated)

Commits

• 6a794df publish 0.28.0 to npm
• 64ee0ea fix #4435: support with { type: text } imports
• ef65aee fix sort order in snapshots_packagejson.txt
• 1a26a8e try to fix test-old-ts, also shuffle CI tasks
• 556ce6c use '' instead of null to omit build hashes
• 8e675a8 ci: allow missing binary hashes for tests
• 7067763 Reapply "update go 1.25.7 => 1.26.1"
• 39473a9 fix #4343: integrity check for binary download
• 2025c9f publish 0.27.7 to npm
• c6b586e fix typo in Makefile for @esbuild/win32-x64
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for esbuild since your current version.

Updates eslint-config-prettier from 10.1.5 to 10.1.8

Release notes

Sourced from eslint-config-prettier's releases.

v10.1.8

republish latest version

Full Changelog: prettier/eslint-config-prettier@v10.1.5...v10.1.8

Changelog

Sourced from eslint-config-prettier's changelog.

eslint-config-prettier

Commits

• 9b0b0a4 fix: release a new latest version
• See full diff in compare view

Updates eslint-plugin-headers from 1.3.3 to 1.3.4

Release notes

Sourced from eslint-plugin-headers's releases.

v1.3.4

• Support ESLint 10.

Full Changelog: robmisasi/eslint-plugin-headers@v1.3.3...v1.3.4

Commits

• c8f8537 1.3.4
• 7a1f7a0 Tweak AST traversal to support ESLint 10. Update dev dependencies.
• d31dee9 Update dev dependencies.
• See full diff in compare view

Updates google-artifactregistry-auth from 3.4.0 to 3.5.0

Release notes

Sourced from google-artifactregistry-auth's releases.

v3.5.0

Add yarn support in GoogleCloudPlatform/artifact-registry-npm-tools#78

Commits

• adf7988 Bump to version v3.5.0 for release
• 36fc4c0 Revert "Bump to version v3.5.0 for release"
• 31f9653 Bump to version v3.5.0 for release
• 9f8b4ad Adding support of .yarnrc.yml to npm tools (#78)
• See full diff in compare view

Updates memfs from 4.42.0 to 4.57.6

Release notes

Sourced from memfs's releases.

Release v4.57.6

Full Changelog: streamich/memfs@v4.57.5...v4.57.6

Release v4.57.5

Full Changelog: streamich/memfs@v4.57.4...v4.57.5

Release v4.57.4

What's Changed

• Add structured documentation for memfs by @​streamich in streamich/memfs#1259

Full Changelog: streamich/memfs@v4.57.3...v4.57.4

Release v4.57.3

What's Changed

• fix: uncomment cpSync and statfsSync in fsSynchronousApiList by @​GoodbyeNJN in streamich/memfs#1256

New Contributors

• @​GoodbyeNJN made their first contribution in streamich/memfs#1256

Full Changelog: streamich/memfs@v4.57.2...v4.57.3

Release v4.57.2

What's Changed

• fix(access): ensure symlinks are followed when checking for executable flag by @​boneskull in streamich/memfs#1253

New Contributors

• @​boneskull made their first contribution in streamich/memfs#1253

Full Changelog: streamich/memfs@v4.57.1...v4.57.2

Release v4.57.1

What's Changed

• fix: EBADF when calling fileHandle.close() after streaming via pipeline by @​Copilot in streamich/memfs#1249

Full Changelog: streamich/memfs@v4.57.0...v4.57.1

Release v4.57.0

What's Changed

• feat: allow injecting custom process implementation for better testability by @​Copilot in streamich/memfs#1248

Full Changelog: streamich/memfs@v4.56.11...v4.57.0

Release v4.56.11

What's Changed

• fix: normalize leading ./ in relative glob patterns by @​Copilot in streamich/memfs#1243

... (truncated)

Changelog

Sourced from memfs's changelog.

4.54.0 (2026-01-18)

Features

• 🎸 add locking for FSA writable handles (35d3519)

4.53.0 (2026-01-17)

Features

• implement Result type and improve error handling for exists methods (f95531f), closes #1218

4.52.0 (2026-01-15)

Bug Fixes

• 🐛 add deprecated Dirent.path with deprecation notice (ebf8ea9)

Features

• 🎸 add disposable methods to Dir (d237aa9)
• 🎸 add Dirent.parentPath (f72f9fe)

4.51.1 (2025-11-30)

Bug Fixes

• add glob functions to API lists (445f337)

4.51.0 (2025-11-12)

Features

• sort files and folder when using toTreeSync() (673cb7a), closes #1214

4.50.0 (2025-10-28)

Features

• 🎸 improve Node buffer allocation strategy (d1edb3f)
• optimize Node buffer management to prevent O(n^2) overhead (95d6f09)

4.49.0 (2025-10-06)

... (truncated)

Commits

• 8a5e792 chore: release v4.57.6
• b204b04 style: 💄 run formatter
• 3af3b90 fix: 🐛 update docs
• b8a82d7 chore: release v4.57.5
• 612be41 fix: distribute docs
• 61073ce chore: release v4.57.4
• 913bbc2 fix: release docs
• 17a04e0 Merge pull request #1259 from streamich/docs
• ea48253 style: 💄 run Prettier
• 7c690f6 docs ✏️ add structured documentation for memfs
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for memfs since your current version.

Updates mnemonist from 0.40.3 to 0.40.4

Release notes

Sourced from mnemonist's releases.

v0.40.4

• Fixing LRUMap.setpop & LRUCache.setpop type declaration (@​richardgarnier).

Changelog

Sourced from mnemonist's changelog.

0.40.4

• Fixing LRUMap.setpop & LRUCache.setpop type declaration (@​richardgarnier).

Commits

• 1f2c752 Bump 0.40.4
• 30b92bd Fix LRUMap:setpop method type declaration
• See full diff in compare view

Updates msw from 2.10.4 to 2.14.6

Release notes

Sourced from msw's releases.

v2.14.6 (2026-05-11)

Bug Fixes

• defineNetwork: prevent event forwarding manually (#2740) (ccb40e08e3ef1dd80da217f74a1093be260a3f51) @​kettanaito

v2.14.5 (2026-05-08)

Bug Fixes

• ws: remove all frame listeners on client closure (#2739) (91a5d4131ceae9250acc40e0fa44b3c64f030d3e) @​kettanaito

v2.14.4 (2026-05-07)

Bug Fixes

• add finalize API for handler cleanup (#2738) (a288f5452970da6537ff31fce6b7f99eb620e563) @​kettanaito

v2.14.3 (2026-05-04)

Bug Fixes

• prevent frame abort listener leak (#2737) (c4567d2a398fb3315cebea4b66e9b79022ad569c) @​kettanaito

v2.14.2 (2026-04-29)

Bug Fixes

• export the NetworkApi type (#2734) (f0c03214b59f906ca8e92e3f0bb5d08fdf7d6f5e) @​kettanaito

v2.14.1 (2026-04-29)

Bug Fixes

• export default handler controllers (#2733) (f8dc874a236a4bd376c23cce9dd55ed59b8279e2) @​kettanaito

v2.14.0 (2026-04-29)

Features

• support ws.onUpgrade for handling connection upgrades (#2732) (e00e4d693db34884a316f659b8dcfb507cd79dce) @​kettanaito

Bug Fixes

• do not clone user-provided responses (#2731) (6953307c8061626d31a3651e69d47c885c0e4b76) @​kettanaito
• HttpResponse: forward cookies only when response is used (#2728) (30668e68f403535636bfb8dc12c64299d9c1c6e6) @​kettanaito

v2.13.6 (2026-04-24)

Bug Fixes

... (truncated)

Commits

• 2befc51 chore(release): v2.14.6
• ccb40e0 fix(defineNetwork): prevent event forwarding manually (#2740)
• c07e09b chore(release): v2.14.5
• 91a5d41 fix(ws): remove all frame listeners on client closure (#2739)
• d697485 chore(release): v2.14.4
• a288f54 fix: add finalize API for handler cleanup (#2738)
• de18888 chore(release): v2.14.3
• c4567d2 fix: prevent frame abort listener leak (#2737)
• 4bc4a5c chore(release): v2.14.2
• f0c0321 fix: export the NetworkApi type (#2734)
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for msw since your current version.

Updates prettier from 3.6.1 to 3.8.3

Release notes

Sourced from prettier's releases.

3.8.3

• SCSS: Prevent trailing comma in if() function (prettier/prettier#18471 by @​kovsu)

🔗 Changelog

3.8.2

• Support Angular v21.2

🔗 Changelog

3.8.1

• Include available printers in plugin type declarations (#18706 by @​porada)

🔗 Changelog

3.8.0

• Support Angular v21.1

diff

🔗 Release note "Prettier 3.8: Support for Angular v21.1"

3.7.4

What's Changed

• Fix comment in union type gets duplicated by @​fisker in prettier/prettier#18393
• Fix unstable comment print in union type by @​fisker in prettier/prettier#18395
• Avoid quote around LWC interpolations by @​kovsu in prettier/prettier#18383

🔗 Changelog

3.7.3

What's Changed

• Fix prettier.getFileInfo() change that breaks VSCode extension by @​fisker in prettier/prettier#18375

🔗 Changelog

3.7.2

What's Changed

• Fix string print when switching quotes by @​fisker in prettier/prettier#18351
• Preserve quote for embedded HTML attribute values by @​kovsu in prettier/prettier#18352
• Fix comment in empty type literal by @​fisker in prettier/prettier#18364

🔗 Changelog

3.7.1

... (truncated)

Changelog

Sourced from prettier's changelog.

3.8.3

diff

SCSS: Prevent trailing comma in if() function (#18471 by @​kovsu)

// Input
$value: if(sass(false): 1; else: -1);
// Prettier 3.8.2
$value: if(
sass(false): 1; else: -1,
);
// Prettier 3.8.3
$value: if(sass(false): 1; else: -1);

3.8.2

diff

Angular: Support Angular v21.2 (#18722, #19034 by @​fisker)

Exhaustive typechecking with @default never;

<!-- Input -->
@switch (foo) {
  @case (1) {}
  @default never;
}
<!-- Prettier 3.8.1 -->
SyntaxError: Incomplete block "default never". If you meant to write the @ character, you should use the "&#64;" HTML entity instead. (3:3)
<!-- Prettier 3.8.2 -->
@​switch (foo) {
@​case (1) {}
@​default never;
}

arrow function and instanceof expressions.

</tr></table> 

... (truncated)

Commits

• d7108a7 Release 3.8.3
• 177f908 Prevent trailing comma in SCSS if() function (#18471)
• 1cd4066 Release @​prettier/plugin-oxc@​0.1.4
• a8700e2 Update oxc-parser to v0.125.0
• 752157c Fix tests
• 053fd41 Bump Prettier dependency to 3.8.2
• 904c636 Clean changelog_unreleased
• dc1f7fc Update dependents count
• b31557c Release 3.8.2
• 96bbaed Support Angular v21.2 (#18722)
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for prettier since your current version.

Updates react-dom from 19.2.4 to 19.2.7

Release notes

Sourced from react-dom's releases.

19.2.7 (June 1st, 2026)

React Server Components

• Fixed missing FormData entries in Server Actions which regressed in 19.2.6 (#36566 by @​unstubbable)

19.2.6 (May 6th, 2026)

React Server Components

• Type hardening and performance improvements (#36425 by @​eps1lon and @​unstubbable)

19.2.5 (April 8th, 2026)

React Server Components

• Add more cycle protections (#36236 by @​eps1lon and @​unstubbable)

Commits

• 6117d7c Version 19.2.7 (#36591)
• eaf3e95 Version 19.2.6
• 23f4f9f 19.2.5
• See full diff in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for react-dom since your current version.

Updates @types/react-dom from 19.2.2 to 19.2.3

Commits

• See full diff in compare view

Updates semver from 7.7.4 to 7.8.2

Release notes

Sourced from semver's releases.

v7.8.2

7.8.2 (2026-06-04)

Bug Fixes

• bea6028 #870 increment dotted prerelease identifiers (#870) (@​liuzemei, @​SheldonNeo)

v7.8.1

7.8.1 (2026-05-21)

Bug Fixes

• 17aa702 #869 strip build metadata before comparator trimming (#869) (@​owlstronaut)
• 5f3ca13 #867 handle prerelease bounds in subset (

[dependabot]

Looks like these dependencies are updatable in another way, so this is no longer needed.