chore(deps): update all non-major dependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence	Type	Update	Pending
@figma/rest-api-spec	~0.32.0 -> ~0.33.0			devDependencies	minor
@openapitools/openapi-generator-cli	~2.21.0 -> ~2.23.0			devDependencies	minor
@openapitools/openapi-generator-cli	~2.21.0 -> ~2.23.0			dependencies	minor
@types/chrome (source)	^0.0.328 -> ^0.1.0			devDependencies	minor	0.1.9 (+2)
@types/vscode (source)	~1.102.0 -> ~1.103.0			devDependencies	minor
@vscode/codicons	^0.0.36 -> ^0.0.39			devDependencies	patch	0.0.40
@vscode/codicons	^0.0.36 -> ^0.0.39			dependencies	patch	0.0.40
actions/cache	v4.2.3 -> v4.2.4			action	patch
actions/github-script	v7.0.1 -> v7.1.0			action	minor
codecov/codecov-action	v5.4.3 -> v5.5.1			action	minor
github/codeql-action	v3.29.1 -> v3.30.0			action	minor	v3.30.2 (+1)
lighthouse	~12.7.0 -> ~12.8.0			devDependencies	minor
sass	~1.89.0 -> ~1.92.0			devDependencies	minor	1.92.1
sass-embedded	~1.89.0 -> ~1.92.0			devDependencies	minor	1.92.1
webpack	~5.99.0 -> ~5.101.0			devDependencies	minor

---

Release Notes

figma/rest-api-spec (@​figma/rest-api-spec)

v0.33.0

Compare Source

OpenAPITools/openapi-generator-cli (@​openapitools/openapi-generator-cli)

v2.23.1

Compare Source

Bug Fixes

• deps: update dependency concurrently to v9.2.1 (#​978) (4847fe0)

v2.23.0

Compare Source

Features

• release: v7.15.0 release (#​973) (24443a5)

v2.22.0

Compare Source

Features

• release: trigger a release (#​963) (7ce2ed9)

microsoft/vscode-codicons (@​vscode/codicons)

v0.0.39

Compare Source

🚀 New icons

• send-to-remote-agent #​318

🧹Clean up

• Update archive icon #​318
• Add link in readme to where you can easily preview and search for icons #​295

Full Changelog: microsoft/vscode-codicons@v0.0.38...v0.0.39

v0.0.38

Compare Source

Changes:

• #​316: Improve cross-platform compatibility for SVG processing
• #​315: Refactor file paths for cross-platform compatibility
• #​314: Improved package management
• #​313: Engineering - update lock file
• #​312: Engineering - add pipeline

This list of changes was auto generated.

actions/cache (actions/cache)

v4.2.4

Compare Source

What's Changed

• Update README.md by @​nebuk89 in #​1620
• Upgrade @actions/cache to 4.0.5 and move @protobuf-ts/plugin to dev depdencies by @​Link- in #​1634
• Prepare release 4.2.4 by @​Link- in #​1636

New Contributors

• @​nebuk89 made their first contribution in #​1620

Full Changelog: actions/cache@v4...v4.2.4

actions/github-script (actions/github-script)

v7.1.0

Compare Source

codecov/codecov-action (codecov/codecov-action)

v5.5.1

Compare Source

What's Changed

• fix: overwrite pr number on fork by @​thomasrockhu-codecov in #​1871
• build(deps): bump actions/checkout from 4.2.2 to 5.0.0 by @​app/dependabot in #​1868
• build(deps): bump github/codeql-action from 3.29.9 to 3.29.11 by @​app/dependabot in #​1867
• fix: update to use local app/ dir by @​thomasrockhu-codecov in #​1872
• docs: fix typo in README by @​datalater in #​1866
• Document a codecov-cli version reference example by @​webknjaz in #​1774
• build(deps): bump github/codeql-action from 3.28.18 to 3.29.9 by @​app/dependabot in #​1861
• build(deps): bump ossf/scorecard-action from 2.4.1 to 2.4.2 by @​app/dependabot in #​1833

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.5.0..v5.5.1

v5.5.0

Compare Source

What's Changed

• feat: upgrade wrapper to 0.2.4 by @​jviall in #​1864
• Pin actions/github-script by Git SHA by @​martincostello in #​1859
• fix: check reqs exist by @​joseph-sentry in #​1835
• fix: Typo in README by @​spalmurray in #​1838
• docs: Refine OIDC docs by @​spalmurray in #​1837
• build(deps): bump github/codeql-action from 3.28.17 to 3.28.18 by @​app/dependabot in #​1829

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.4.3..v5.5.0

github/codeql-action (github/codeql-action)

v3.30.0

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.30.0 - 01 Sep 2025

• Reduce the size of the CodeQL Action, speeding up workflows by approximately 4 seconds. #​3054

See the full CHANGELOG.md for more information.

v3.29.11

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.29.11 - 21 Aug 2025

• Update default CodeQL bundle version to 2.22.4. #​3044

See the full CHANGELOG.md for more information.

v3.29.10

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.29.10 - 18 Aug 2025

No user facing changes.

See the full CHANGELOG.md for more information.

v3.29.9

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.29.9 - 12 Aug 2025

No user facing changes.

See the full CHANGELOG.md for more information.

v3.29.8

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.29.8 - 08 Aug 2025

• Fix an issue where the Action would autodetect unsupported languages such as HTML. #​3015

See the full CHANGELOG.md for more information.

v3.29.7

Compare Source

This is a re-release of v3.29.5 to mitigate an issue that was discovered with v3.29.6.

v3.29.6

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.29.6 - 07 Aug 2025

• The cleanup-level input to the analyze Action is now deprecated. The CodeQL Action has written a limited amount of intermediate results to the database since version 2.2.5, and now automatically manages cleanup. #​2999
• Update default CodeQL bundle version to 2.22.3. #​3000

See the full CHANGELOG.md for more information.

v3.29.5

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.29.5 - 29 Jul 2025

• Update default CodeQL bundle version to 2.22.2. #​2986

See the full CHANGELOG.md for more information.

v3.29.4

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.29.4 - 23 Jul 2025

No user facing changes.

See the full CHANGELOG.md for more information.

v3.29.3

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.29.3 - 21 Jul 2025

No user facing changes.

See the full CHANGELOG.md for more information.

v3.29.2

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.29.2 - 30 Jun 2025

• Experimental: When the quality-queries input for the init action is provided with an argument, separate .quality.sarif files are produced and uploaded for each language with the results of the specified queries. Do not use this in production as it is part of an internal experiment and subject to change at any time. #​2935

See the full CHANGELOG.md for more information.

GoogleChrome/lighthouse (lighthouse)

v12.8.2

Compare Source

Full Changelog

We expect this release to ship in the DevTools of Chrome 141, and to PageSpeed Insights within 2 weeks.

New contributors

Thanks to our new contributors 👽🐷🐰🐯🐻!

• uthem150 @​uthem150
• Nirav Gondaliya @​niravzxv

Core

• errors-in-console: truncate large errors (#​16619)
• insights: passing score (not n/a) for empty results (#​16639)
• non-composited-animations: separate custom CSS properties (#​16627)

Report

• viewer: only disable save-gist button on successful save (#​16618)

Deps

• upgrade deps (#​16660)
• upgrade trace_engine to 0.0.59 (#​16659)
• remove semver (#​16655)
• upgrade tldts-icann (#​16657)
• upgrade esbuild to 0.25.9 (#​16652)
• upgrade / drop many dev deps (#​16651)
• upgrade trace_engine to 0.0.58 (#​16649)

I18n

• import (#​16662)

Tests

• disable startTimespan api test (#​16653)
• disable trusted-types-directive-present smoke test (#​16620)
• smokehouse: log specific error message when missing tests path (#​16648)

Misc

• use structuredClone instead of lodash cloneDeep (#​16656)

v12.8.1

Compare Source

Full Changelog

We expect this release to ship in the DevTools of Chrome 141, and to PageSpeed Insights within 2 weeks.

New contributors

Thanks to our new contributors 👽🐷🐰🐯🐻!

• uthem150 @​uthem150
• Nirav Gondaliya @​niravzxv

Core

• errors-in-console: truncate large errors (#​16619)
• insights: passing score (not n/a) for empty results (#​16639)
• non-composited-animations: separate custom CSS properties (#​16627)

Report

• viewer: only disable save-gist button on successful save (#​16618)

Deps

• upgrade deps (#​16660)
• upgrade trace_engine to 0.0.59 (#​16659)
• remove semver (#​16655)
• upgrade tldts-icann (#​16657)
• upgrade esbuild to 0.25.9 (#​16652)
• upgrade / drop many dev deps (#​16651)
• upgrade trace_engine to 0.0.58 (#​16649)

I18n

• import (#​16662)

Tests

• disable startTimespan api test (#​16653)
• disable trusted-types-directive-present smoke test (#​16620)
• smokehouse: log specific error message when missing tests path (#​16648)

Misc

• use structuredClone instead of lodash cloneDeep (#​16656)

v12.8.0

Compare Source

Full Changelog

We expect this release to ship in the DevTools of Chrome 140, and to PageSpeed Insights within 2 weeks.

New contributors

Thanks to our new contributors 👽🐷🐰🐯🐻!

• Boluwatife Omosowon @​bolu-tife
• Jonas Thelemann @​dargmuesli

Core

• network-requests: add initiators to debugData (#​16605)

I18n

• import (#​16616)

Tests

• disable csp-block-all smoke test (#​16598)

Misc

• revert json modules to fully support Node 20 (#​16613)
• ci: clear devtools build cache (#​16615)
• logger: bump to 2.0.2 (#​16604)
• logger: update debug dep to v4 (#​16601)
• treemap: fix sizes not showing for source map nodes (#​16593)

sass/dart-sass (sass)

v1.92.0

Compare Source

• Breaking change: Emit declarations, childless at-rules, and comments in
  the order they appear in the source even when they're interleaved with nested
  rules. This obsoletes the mixed-decls deprecation.

• Breaking change: The function name type() is now fully reserved for the
  plain CSS function. This means that @function definitions with the name
  type will produce errors, while function calls will be parsed as special
  function strings.

• Configuring private variables using @use ... with, @forward ... with, and
  meta.load-css(..., $with: ...) is now deprecated. Private variables were
  always intended to be fully encapsulated within the module that defines them,
  and this helps enforce that encapsulation.

• Fix a bug where @extend rules loaded through a mixture of @import and
  @use rules could fail to apply correctly.

Command-Line Interface

• In --watch mode, delete the source map when the associated source file is
  deleted.

v1.91.0

Compare Source

• Potentially breaking change: meta.inspect() (as well as other systems
  that use it such as @debug and certain error messages) now emits numbers
  with as high precision as is available instead of rounding to the nearest
  1e⁻¹⁰ as we do when serializing to CSS. This better fits the purpose of
  meta.inspect(), which is to provide full information about the structure of
  a Sass value.

• Passing a rest argument ($arg...) before a positional or named argument when
  calling a function or mixin is now deprecated. This was always outside the
  specified syntax, but it was historically treated the same as passing the rest
  argument at the end of the argument list whether or not that matched the
  visual order of the arguments.

v1.90.0

Compare Source

• Allow a @forwarded module to be loaded with a configuration when that module
  has already been loaded with a different configuration and the module
  doesn't define any variables that would have been configured anyway.

sass/embedded-host-node (sass-embedded)

v1.92.0

Compare Source

• Breaking change: Emit declarations, childless at-rules, and comments in
  the order they appear in the source even when they're interleaved with nested
  rules. This obsoletes the mixed-decls deprecation.

• Breaking change: The function name type() is now fully reserved for the
  plain CSS function. This means that @function definitions with the name
  type will produce errors, while function calls will be parsed as special
  function strings.

• Configuring private variables using @use ... with, @forward ... with, and
  meta.load-css(..., $with: ...) is now deprecated. Private variables were
  always intended to be fully encapsulated within the module that defines them,
  and this helps enforce that encapsulation.

• Fix a bug where @extend rules loaded through a mixture of @import and
  @use rules could fail to apply correctly.

Command-Line Interface

• In --watch mode, delete the source map when the associated source file is
  deleted.

v1.91.0

Compare Source

• Potentially breaking change: meta.inspect() (as well as other systems
  that use it such as @debug and certain error messages) now emits numbers
  with as high precision as is available instead of rounding to the nearest
  1e⁻¹⁰ as we do when serializing to CSS. This better fits the purpose of
  meta.inspect(), which is to provide full information about the structure of
  a Sass value.

• Passing a rest argument ($arg...) before a positional or named argument when
  calling a function or mixin is now deprecated. This was always outside the
  specified syntax, but it was historically treated the same as passing the rest
  argument at the end of the argument list whether or not that matched the
  visual order of the arguments.

v1.90.0

Compare Source

• Allow a @forwarded module to be loaded with a configuration when that module
  has already been loaded with a different configuration and the module
  doesn't define any variables that would have been configured anyway.

webpack/webpack (webpack)

v5.101.3

Compare Source

v5.101.2

Compare Source

Fixes

• Fixed syntax error when comment is on the last line
• Handle var declaration for createRequire
• Distinguish free variable and tagged variable

v5.101.1

Compare Source

Fixes

• Filter deleted assets in processAdditionalAssets hook
• HMR failure in defer module
• Emit assets even if invalidation occurs again
• Export types for serialization and deserialization in plugins and export the ModuleFactory class
• Fixed the failure export of internal function for ES module chunk format
• Fixed GetChunkFilename failure caused by dependOn entry
• Fixed the import of missing dependency chunks
• Fixed when entry chunk depends on the runtime chunk hash
• Fixed module.exports bundle to ESM library
• Adjusted the time of adding a group depending on the fragment of execution time
• Fixed circle dependencies when require RawModule and condition of isDeferred
• Tree-shakable module library should align preconditions of allowInlineStartup

v5.101.0

Compare Source

v5.100.2

Compare Source

v5.100.1

Compare Source

v5.100.0

Compare Source

Fixes

• Fixed the case where an ES modules entry chunk depends on the runtime chunk hash
• Handle function exports in webpack module wrapper
• Ensure dependent chunks are imported before startup & fix duplicate export of 'default'
• Generate lose closing brace when exports are unprovided
• CleanPlugin doesn't unlink same file twice
• Fixed unexpected error codes from fs.unlink on Windows
• Typescript types

Features

• HMR support for ES modules output
• ES module output mode now fully supports splitChunks when external variables and runtimeChunk are not set.
• Added support using keyword
• Implemented tc39 Defer Module Evaluation (experiment)
• Support dynamic template literals expressions for new URL(...)
• Enable ES modules worker chunk loading for Node.js targets
• Improved support for destructing in DefinePlugin
• Added VirtualUrlPlugin to support virtual: modules

Performance Improvements

• Remove useless startup entrypoint runtime for ES modules output
• Cache new URL(...) evaluate expression

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[nx-cloud]

View your CI Pipeline Execution ↗ for commit ae2c7f6

Command	Status	Duration	Result
nx run-many --target=test-int	✅ Succeeded	37m 37s	View ↗
nx run-many --target=build --projects=eslint-pl...	✅ Succeeded	23s	View ↗
nx run-many --target=test-e2e	✅ Succeeded	1m 57s	View ↗
nx run-many --target=publish --nx-bail --userco...	✅ Succeeded	59s	View ↗
nx run-many --target=prepare-publish --exclude-...	✅ Succeeded	7s	View ↗
nx run-many --target=documentation	✅ Succeeded	1m 21s	View ↗
nx affected --target=lint --configuration ci	✅ Succeeded	15m 27s	View ↗
nx run-many --target=build,build-swagger	✅ Succeeded	15m 52s	View ↗
Additional runs (3)	✅ Succeeded	...	View ↗

---

☁️ Nx Cloud last updated this comment at 2025-09-09 19:20:48 UTC

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 71.25%. Comparing base (7a23e66) to head (ae2c7f6).
⚠️ Report is 2 commits behind head on main.

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.