Update all patch versions (prod-2-9-advance) (patch)

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
alembic (source, changelog)	1.14.0 -> 1.14.1
azure-storage-blob (source)	12.24.0 -> 12.24.1
c2cwsgiutils	6.1.5 -> 6.1.7
ngeo	2.9.0-version-2.9-latest.20241206T104704Z.0bc3efb55.2.9 -> 2.9.0-version-2.9-latest.20250115T074000Z.4d31fc0fa.2.9
sass-embedded	1.83.0 -> 1.83.4
sqlalchemy (changelog)	2.0.36 -> 2.0.37
typescript (source)	5.7.2 -> 5.7.3
vite (source)	6.0.5 -> 6.0.11
vite (source)	5.4.11 -> 5.4.14

---

Release Notes

Azure/azure-sdk-for-python (azure-storage-blob)

v12.24.1

Compare Source

12.24.1 (2025-01-22)

Bugs Fixed

• Fixed an issue where custom transports may encounter AttributeError on certain requests.
• Fixed an issue where StorageStreamDownloader(chars=-1) may not return all data.

camptocamp/c2cwsgiutils (c2cwsgiutils)

v6.1.7

Compare Source

6.1.7 (2025-01-16)

New feature

• #​2576 Remove spamming trace on Redis broadcast for Prometheus (@​sbrunner)

Fixed bugs

• #​2578 [Backport 6.1] Get the background color from the generated image (@​c2c-bot-gis-ci-2, @​sbrunner)

v6.1.6

Compare Source

6.1.6 (2025-01-06)

Fixed bugs

• #​2555 Fix setup logging (@​sbrunner, @​geo-ghci-int[bot])

Dependency update

• #​2564 Update CI dependencies (6.1) (patch) (@​renovate[bot], @​geo-ghci-int[bot])
• #​2565 Update all patch versions (6.1) (patch) (@​renovate[bot], @​geo-ghci-int[bot])
• #​2544 Update all patch versions (6.1) (patch) (@​renovate[bot])

Chore

Changes that shouldn't affect the users like continuous integration updates

• #​2557 Audit Dpkg 6.1 (@​geo-ghci-int[bot])
• #​2553 Audit Dpkg 6.1 (@​geo-ghci-int[bot])
• #​2559 Audit Dpkg 6.1 (@​geo-ghci-int[bot])

camptocamp/ngeo (ngeo)

v2.9.0-version-2.9-latest.20250115T074000Z.4d31fc0fa.2.9

Compare Source

v2.9.0-version-2.9-latest.20250110T113658Z.3f43368e3.2.9

Compare Source

sass/embedded-host-node (sass-embedded)

v1.83.4

Compare Source

• No user-visible changes.

v1.83.3

Compare Source

• No user-visible changes.

v1.83.2

Compare Source

• Properly display deprecation IDs for the JS Sass API.

• Don't display deprecation IDs for user-defined deprecations.

v1.83.1

Compare Source

• Fix a bug where --quiet-deps would get deactivated for @content blocks,
  even when those blocks were entirely contained within dependencies.

• Include deprecation IDs in deprecation warnings to make it easier to determine
  what to pass to --silence-deprecation or --fatal-deprecation.

microsoft/TypeScript (typescript)

v5.7.3

Compare Source

vitejs/vite (vite)

v6.0.11

Compare Source

• fix: preview.allowedHosts with specific values was not respected (#​19246) (aeb3ec8), closes #​19246
• fix: allow CORS from loopback addresses by default (#​19249) (3d03899), closes #​19249

v6.0.10

Compare Source

• fix: try parse server.origin URL (#​19241) (2495022), closes #​19241

v6.0.9

Compare Source

• fix!: check host header to prevent DNS rebinding attacks and introduce server.allowedHosts (bd896fb)
• fix!: default server.cors: false to disallow fetching from untrusted origins (b09572a)
• fix: verify token for HMR WebSocket connection (029dcd6)

v6.0.8

Compare Source

• fix: avoid SSR HMR for HTML files (#​19193) (3bd55bc), closes #​19193
• fix: build time display 7m 60s (#​19108) (cf0d2c8), closes #​19108
• fix: don't resolve URL starting with double slash (#​19059) (35942cd), closes #​19059
• fix: ensure server.close() only called once (#​19204) (db81c2d), closes #​19204
• fix: resolve.conditions in ResolvedConfig was defaultServerConditions (#​19174) (ad75c56), closes #​19174
• fix: tree shake stringified JSON imports (#​19189) (f2aed62), closes #​19189
• fix: use shared sigterm callback (#​19203) (47039f4), closes #​19203
• fix(deps): update all non-major dependencies (#​19098) (8639538), closes #​19098
• fix(optimizer): use correct default install state path for yarn PnP (#​19119) (e690d8b), closes #​19119
• fix(types): improve ESBuildOptions.include / exclude type to allow readonly (string | RegExp)[] (ea53e70), closes #​19146
• chore(deps): update dependency pathe to v2 (#​19139) (71506f0), closes #​19139

v6.0.7

Compare Source

• fix: fix minify when builder.sharedPlugins: true (#​19025) (f7b1964), closes #​19025
• fix: skip the plugin if it has been called before with the same id and importer (#​19016) (b178c90), closes #​19016
• fix(html): error while removing vite-ignore attribute for inline script (#​19062) (a492253), closes #​19062
• fix(ssr): fix semicolon injection by ssr transform (#​19097) (1c102d5), closes #​19097
• perf: skip globbing for static path in warmup (#​19107) (677508b), closes #​19107
• feat(css): show lightningcss warnings (#​19076) (b07c036), closes #​19076

v6.0.6

Compare Source

• fix: replace runner-side path normalization with fetchModule-side resolve (#​18361) (9f10261), closes #​18361
• fix(css): resolve style tags in HTML files correctly for lightningcss (#​19001) (afff05c), closes #​19001
• fix(css): show correct error when unknown placeholder is used for CSS modules pattern in lightningcs (9290d85), closes #​19070
• fix(resolve): handle package.json with UTF-8 BOM (#​19000) (902567a), closes #​19000
• fix(ssrTransform): preserve line offset when transforming imports (#​19004) (1aa434e), closes #​19004
• chore: fix typo in comment (#​19067) (eb06ec3), closes #​19067
• chore: update comment about build.target (#​19047) (0e9e81f), closes #​19047
• revert: unpin esbuild version (#​19043) (8bfe247), closes #​19043
• test(ssr): test virtual module with query (#​19044) (a1f4b46), closes #​19044

---

Configuration

📅 Schedule: Branch creation - "after 5pm on the first day of the month" in timezone Europe/Zurich, Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.