Update all non-major dependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
better-sqlite3	^12.2.0 → ^12.6.2
h3 (source)	^1.13.0 → ^1.15.5
h3 (source)	^1.15.0 → ^1.15.5
nitropack	^2.13.0 → ^2.13.1
unbuild	^3.5.0 → ^3.6.1
vue-tsc (source)	^3.2.3 → ^3.2.4

---

Release Notes

WiseLibs/better-sqlite3 (better-sqlite3)

v12.6.2

Compare Source

What's Changed

• fix build: update node-abi version in package.json to ^4.25.0 by @​mceachen in #​1439

Full Changelog: WiseLibs/better-sqlite3@v12.6.1...v12.6.2

v12.6.0

Compare Source

What's Changed

• Update SQLite to version 3.51.2 in #​1436

Full Changelog: WiseLibs/better-sqlite3@v12.5.0...v12.6.0

v12.5.0

Compare Source

What's Changed

• Update SQLite to version 3.51.1 in #​1424

Full Changelog: WiseLibs/better-sqlite3@v12.4.6...v12.5.0

v12.4.6

Compare Source

What's Changed

• Fix npm publishing by @​mceachen in #​1423

Full Changelog: WiseLibs/better-sqlite3@v12.4.5...v12.4.6

v12.4.5

Compare Source

What's Changed

• Add support for Node v25 and Electron 39+ prebuilds by @​mceachen in #​1422

Full Changelog: WiseLibs/better-sqlite3@v12.4.4...v12.4.5

v12.4.1

Compare Source

What's Changed

• Include all source files in package by @​neoxpert in #​1405

Full Changelog: WiseLibs/better-sqlite3@v12.4.0...v12.4.1

v12.3.0

Compare Source

What's Changed

• Update the Windows runner on build workflow to windows-2022 by @​m4heshd in #​1388
• Bump stefanzweifel/git-auto-commit-action from 5 to 6 in the github-actions group by @​dependabot[bot] in #​1381
• Add node:sqlite benchmark by @​weary-adventurer in #​1334
• Prebuild for Electron 38 by @​neoxpert in #​1398

New Contributors

• @​weary-adventurer made their first contribution in #​1334

Full Changelog: WiseLibs/better-sqlite3@v12.2.0...v12.3.0

h3js/h3 (h3)

v1.15.5

Compare Source

compare changes

[!IMPORTANT]
Security: Fixed a bug in readBody(event) and readRawBody(event) utils where certain Transfer-Encoding header formats could cause the request body to be ignored.

In some deployments (for example, behind TCP load balancers or non-normalizing proxies), this could allow request smuggling. The handling is now safe and fully compliant. (read more)

🩹 Fixes

• readRawBody: Fix case-sensitive Transfer-Encoding check causing request smuggling risk (618ccf4)

v1.15.4

Compare Source

compare changes

🩹 Fixes

• getRequestHost: Return first host from x-forwarded-host (#​1175)

💅 Refactors

• useSession: Backport SessionManager interface to fix types (#​1058)

🏡 Chore

• docs: Fix typos (#​1108)

❤️ Contributors

• Pooya Parsa (@​pi0)
• Kricsleo (@​kricsleo)
• Izoukhai (@​izoukhai)

v1.15.3

Compare Source

compare changes

🩹 Fixes

• serveStatic: Omit decoded id from statusMessage (#​1044)

v1.15.2

Compare Source

compare changes

🩹 Fixes

• Handle FormData body (3757072 f38dd03 0c9b276)
• cache: Correct comparison in cache headers (#​1034)
• Handle Headers when merging proxy headers (#​1027)
• setCookie: Unique by name, domain, and path only (#​1042)

❤️ Contributors

• Kricsleo (@​kricsleo)

v1.15.1

Compare Source

compare changes

🩹 Fixes

• setCookie: Properly merge and dedup set-cookie header (#​981)

v1.15.0

Compare Source

compare changes

• Migrate from unenv v1 to node-mock-http (#​970)

v1.14.0

Compare Source

compare changes

🚀 Enhancements

• session: Allow using with crossws hooks (#​960)

❤️ Contributors

• Pooya Parsa (@​pi0)
• Kanonji (@​kanonji)

v1.13.1

Compare Source

compare changes

🩹 Fixes

• proxy: Ignore incoming accept-encoding header (#​914)
• proxy: Pass host for local targets (#​946)

📖 Documentation

• Fix typos (#​917, #​918, #​919)
• Remove duplicate list (#​939)

❤️ Contributors

• Pooya Parsa (@​pi0)
• Mak (@​Makkalay)
• Daniel Rentz (@​danielrentz)

nitrojs/nitro (nitropack)

v2.13.1

Compare Source

compare changes

This release mainly updates dependencies (696dc3a9)

• h3@​1.15.5 released with security fix (release notes)
• unstorage@v1.17.4 released with chokidar, lru-cache, and h3 dependency bumps (release notes)

unjs/unbuild (unbuild)

v3.6.1

Compare Source

compare changes

🩹 Fixes

• Use pathToFileURL for stubbed absolute path (#​546)

🏡 Chore

• Update lockfile (5af91b1)

❤️ Contributors

• Pooya Parsa (@​pi0)
• Julien Huang (@​huang-julien)

v3.6.0

Compare Source

compare changes

🚀 Enhancements

• Support absoluteJitiPath for stub mode (#​542)

🩹 Fixes

• types: Improve type safety (#​516)

📖 Documentation

• Remove wrong jsdoc for dts type (#​540)

🏡 Chore

• Add note about obuild (a751e3b)
• Update deps (2951dfd)
• Update eslint config (66b9604)

✅ Tests

• Only include src for coverage report (#​525)

❤️ Contributors

• Kanon (@​ysknsid25)
• Pooya Parsa (@​pi0)
• Bobbie Goede bobbiegoede@gmail.com
• Kricsleo (@​kricsleo)
• Daniel Roe (@​danielroe)

vuejs/language-tools (vue-tsc)

v3.2.4

Compare Source

language-core

• feat: place plugin configs under ctx.config and support type annotation via generics (#​5944) - Thanks to @​KazariEX!

workspace

• chore: publish to npm with OIDC (#​5912) - Thanks to @​ghiscoding!

---

Configuration

📅 Schedule: Branch creation - "on Monday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Review	Updated (UTC)
evlog-docs	Ready	Preview, Comment	Jan 26, 2026 5:48am

[pkg-pr-new]

npm i https://pkg.pr.new/evlog@5

commit: 608e625