chore(deps): update all non-major dependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
bumpp	11.0.1 → 11.1.0
docus	5.10.0 → 5.11.0
html-validate (source)	~10.15.0 → ~10.16.0
pnpm (source)	10.33.3 → 10.33.4

---

Release Notes

antfu-collective/bumpp (bumpp)

v11.1.0

Compare Source

   🐞 Bug Fixes

• Inherit stdio for git push to support windows SSH passphrase  -  by @​awdr74100 in #​122 (a30af)
• cli: Prevent empty CLI files from overriding config-file files  -  by @​benny123tw in #​120 (4e42e)

    View changes on GitHub

nuxt-content/docus (docus)

v5.11.0

Compare Source

Features

• css: add support for app/app.css to avoid duplicate tailwind (#​1364) (98f68d5)
• layer: set ContentTOC default variant to circuit (#​1360) (7d90d20)
• toc: improve main grid to make it wider (#​1363) (45c65cc)

Bug Fixes

• css: don't use @​layer base for prod hydration (73606b7)
• layer: incorrect MCP tools when app.baseURL is set (#​1361) (f7e42eb)
• mcp: respect mcp.route in page header dropdown (#​1362) (5c36cd4)

v5.10.1

Compare Source

Bug Fixes

• ai: make sure to set markdown headers as response (#​1348) (cc0fc5b)
• assistant: use internal fetch for MCP on workers (#​1309) (596d027)

html-validate/html-validate (html-validate)

v10.16.0

Compare Source

Features

• rules: option to allow css-variables with no-inline-style (bb68031)

Bug Fixes

• adjust rules specifically around <p> validation, “>”, and character sequences starting with “&” (29d1ded)
• rules: allow aria-label on <search> (0f4fb51), closes #​359

pnpm/pnpm (pnpm)

v10.33.4: pnpm 10.33.4

Compare Source

Patch Changes

• Pin the integrity of git-hosted tarballs (codeload.github.com, gitlab.com, bitbucket.org) in the lockfile so that subsequent installs detect a tampered or substituted tarball and refuse to install it. Previously the lockfile only stored the tarball URL for git dependencies, so a compromised git host or a man-in-the-middle could serve arbitrary code on later installs without lockfile changes.

  A new gitHosted: true field is recorded on git-hosted tarball resolutions in the lockfile, letting every reader/writer route them by a single typed check instead of pattern-matching the tarball URL in each call site. Lockfiles written by older pnpm versions are enriched on load (URL fallback) so the field can be relied on uniformly across the codebase.

• Fix a regression where pnpm --recursive --filter '!<pkg>' run/exec/test/add would include the workspace root in the matched projects. The workspace root is now correctly excluded by default when only negative --filter arguments are provided, matching the documented behavior. To include the root, pass --include-workspace-root #​11341.

Platinum Sponsors

Gold Sponsors

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • "on Monday"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[netlify]

✅ Deploy Preview for html-validator ready!

Name	Link
🔨 Latest commit	832b3ef
🔍 Latest deploy log	https://app.netlify.com/projects/html-validator/deploys/6a01903811eb3300083c80f5
😎 Deploy Preview	https://deploy-preview-806--html-validator.netlify.app
📱 Preview on mobile	Toggle QR Code... Use your smartphone camera to open QR code link.
🤖 Make changes	Run an agent on this branch

---

To edit notification comments on pull requests, go to your Netlify project configuration.

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 53.93%. Comparing base (03e4d07) to head (832b3ef).

Additional details and impacted files

@@           Coverage Diff           @@
##             main     #806   +/-   ##
=======================================
  Coverage   53.93%   53.93%           
=======================================
  Files           4        4           
  Lines          89       89           
  Branches       29       29           
=======================================
  Hits           48       48           
  Misses         41       41           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.