[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence	Type	Update
@aptre/protobuf-es-lite	1.2.4 → 1.2.5					overrides	patch
@aptre/protobuf-es-lite	1.2.4 → 1.2.5					resolutions	patch
@aptre/protobuf-es-lite	1.2.4 → 1.2.5					dependencies	patch
github.com/aperturerobotics/cpp-yamux	26bdf6c → 09c8254					require	digest
github.com/dolthub/go-mysql-server	c22d4b6 → 9998575					require	digest
github.com/google/pprof	1facf8f → dbd0ed3					require	digest
github.com/pion/transport/v5	v5.1.1 → v5.1.3					require	patch
oxc-parser (source)	^0.155.0 → ^0.156.0					devDependencies	minor
pako	3.0.2 → 3.0.3					dependencies	patch
quickjs-wasi-reactor	0.17.0-rev.1 → 0.17.0					overrides	patch
quickjs-wasi-reactor	0.17.0-rev.1 → 0.17.0					resolutions	patch
quickjs-wasi-reactor	0.17.0-rev.1 → 0.17.0					dependencies	patch

---

Warning

Some dependencies could not be looked up. Check the warning logs for more information.

---

Release Notes

aperturerobotics/protobuf-es-lite (@​aptre/protobuf-es-lite)

v1.2.5

Compare Source

What's Changed

• fix(deps): update all dependencies by @​renovate[bot] in #​17
• fix(binary): read one-byte varints without the loop by @​ddkesports in #​19
• fix(deps): update dependency typescript to v6 by @​renovate[bot] in #​18

New Contributors

• @​ddkesports made their first contribution in #​19

Full Changelog: aperturerobotics/protobuf-es-lite@v1.2.4...v1.2.5

pion/transport (github.com/pion/transport/v5)

v5.1.3

Compare Source

Changelog

• 26a5783 Do not drop flush signal for batch filled midflush

v5.1.2

Compare Source

Changelog

• 5d41e19 Return typed nil from UDPConn.RemoteAddr()
• 253a392 Add native MacOS network change notifications
• 366560a Update CI configs to v0.12.8

nodeca/pako (pako)

v3.0.3

Compare Source

Added

• Export Z_Strategy type for compression strategy options, #​326.

Changed

• Speed up CRC32 with slicing-by-8, #​320.

Fixed

• Restore compression strategy constant exports, #​326.
• Enforce the 65536-character limit when collecting gzip header names and comments.

aperturerobotics/js-quickjs-wasi-reactor (quickjs-wasi-reactor)

v0.17.0

Compare Source

Update to QuickJS-NG v0.17.0

Changes

• chore: update quickjs to v0.17.0

QuickJS Source

https://github.com/quickjs-ng/quickjs/tree/v0.17.0, with the patches in patches/ applied

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	golang/​github.com/​google/​pprof@​v0.0.0-20261016150608-1facf8f91b50 ⏵ v0.0.0-20261026192309-dbd0ed30aa88	+1
	golang/​github.com/​pion/​transport/​v5@​v5.1.1 ⏵ v5.1.3	+1
	npm/​pako@​3.0.2 ⏵ 3.0.3	+1		+1	+3
	npm/​quickjs-wasi-reactor@​0.17.0-rev.1 ⏵ 0.17.0
	npm/​oxc-parser@​0.155.0 ⏵ 0.156.0				-1
	npm/​@​aptre/​protobuf-es-lite@​1.2.4 ⏵ 1.2.5	+2		+1	+1
	golang/​github.com/​aperturerobotics/​cpp-yamux@​v0.0.0-20260929192932-26bdf6cab5b3 ⏵ v0.0.0-20261024231300-09c82549af7a			+1

View full report